Use protection groups to automatically discover and protect AWS resources in a single AWS account or across multiple AWS accounts based on rules such as workload type, region, and tags. Protection groups eliminate the need to manually configure protection for each resource.
When to use protection groups
Use protection groups when you need:
-
Automatic discovery and protection of resources in a single AWS account or across multiple AWS accounts in an AWS Organization
-
Organization-wide onboarding for AWS Organizations
-
Automatic discovery and protection of new resources
-
Consistent protection across AWS environments
Supported workloads for protection groups
| Category | Workload |
|---|---|
| Virtualization | EC2 |
| Databases |
|
| Files | EFS |
| Object storage | Amazon S3 |