Determine if the Amazon MQ broker instances provisioned in your AWS account have the desired instance type established within your organization based on the workload deployed (in this case Apache ActiveMQ workload). An MQ broker instance is a broker environment running in the AWS cloud. Cloud Conformity allows you to define the desired MQ broker instance type based on your workload requirements upon enabling the conformity rule.
Setting limits for the type of Amazon MQ broker instances created in your AWS account will help you address internal compliance requirements and prevent unexpected charges on your AWS bill.
Note 1: You can also limit your MQ broker instances to the desired type using AWS Organizations service by implementing your own Service Control Policy on the master account. A Service Control Policy (SCP) is a type of policy that you can use to manage your AWS organization. SCPs enable you to restrict what resources, services and actions the users, groups, and roles in those AWS accounts can use.
Note 2: The desired broker instance type used as example in this conformity rule is mq.m5.large. To meet your own organizational requirements, you will need to configure this rule with your desired broker instance type, using the rule configuration settings available on the Cloud Conformity account dashboard.
To determine if the AWS MQ broker instances launched in your AWS account have the desired instance type, perform the following:
To limit the Amazon MQ broker instances that will be launched in your AWS account to a desired instance type, perform the following:Note: Creating a support case to request the necessary instance type limitation using the AWS cloud API via Command Line Interface (CLI) is not currently supported by AWS.