compliance_details_by_config_rules

Creates, updates, deletes, gets or lists a compliance_details_by_config_rules resource.

Overview

Name	compliance_details_by_config_rules
Type	Resource
Id	aws.config.compliance_details_by_config_rules

Fields

The following fields are returned by SELECT queries:

get_compliance_details_by_config_rule

Name	Datatype	Description
annotation	string	Supplementary information about how the evaluation determined the compliance.
compliance_type	string	Indicates whether the Amazon Web Services resource complies with the Config rule that evaluated it. For the EvaluationResult data type, Config supports only the COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type. (COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA)
config_rule_invoked_time	string (date-time)	The time when the Config rule evaluated the Amazon Web Services resource.
evaluation_result_identifier	object	Uniquely identifies the evaluation result.
result_recorded_time	string (date-time)	The time when Config recorded the evaluation result.
result_token	string	An encrypted token that associates an evaluation with an Config rule. The token identifies the rule, the Amazon Web Services resource being evaluated, and the event that triggered the evaluation.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_compliance_details_by_config_rule	select	region		Returns the evaluation results for the specified Config rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_compliance_details_by_config_rule

Returns the evaluation results for the specified Config rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.

SELECT
annotation,
compliance_type,
config_rule_invoked_time,
evaluation_result_identifier,
result_recorded_time,
result_token
FROM aws.config.compliance_details_by_config_rules
WHERE region = '{{ region }}' -- required
;