如何列出手动创建的AWS资源而不是CloudFormation模板创建的资源？

Question

I would like to have an AWS Config rule to notify on manual resource creation but ignore resources created by CloudFormation templates.

As a first step, listing all manually created resources would suffice.

Is there any AWS feature I could use to achieve this with minimum effort?

Answer 1

CloudFormation uses tags which are reserved for AWS use only, cannot be added by regular users and are created automatically :

In addition to any tags you define, AWS CloudFormation automatically creates the following stack-level tags with the prefix aws::

• aws:cloudformation:logical-id
• aws:cloudformation:stack-id
• aws:cloudformation:stack-name

You could use AWS Config required-tags to check for the lack of presence of the reserved one(s) and that will give you non-CF created resources.