compliance_details_by_resources

Creates, updates, deletes, gets or lists a compliance_details_by_resources resource.

Overview

Name	compliance_details_by_resources
Type	Resource
Id	aws.config.compliance_details_by_resources

Fields

The following fields are returned by SELECT queries:

get_compliance_details_by_resource

Name	Datatype	Description
annotation	string	Supplementary information about how the evaluation determined the compliance.
compliance_type	string	Indicates whether the Amazon Web Services resource complies with the Config rule that evaluated it. For the EvaluationResult data type, Config supports only the COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type. (COMPLIANT, NON_COMPLIANT, NOT_APPLICABLE, INSUFFICIENT_DATA)
config_rule_invoked_time	string (date-time)	The time when the Config rule evaluated the Amazon Web Services resource.
evaluation_result_identifier	object	Uniquely identifies the evaluation result.
result_recorded_time	string (date-time)	The time when Config recorded the evaluation result.
result_token	string	An encrypted token that associates an evaluation with an Config rule. The token identifies the rule, the Amazon Web Services resource being evaluated, and the event that triggered the evaluation.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_compliance_details_by_resource	select	region		Returns the evaluation results for the specified Amazon Web Services resource. The results indicate which Config rules were used to evaluate the resource, when each rule was last invoked, and whether the resource complies with each rule.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_compliance_details_by_resource

Returns the evaluation results for the specified Amazon Web Services resource. The results indicate which Config rules were used to evaluate the resource, when each rule was last invoked, and whether the resource complies with each rule.

SELECT
annotation,
compliance_type,
config_rule_invoked_time,
evaluation_result_identifier,
result_recorded_time,
result_token
FROM aws.config.compliance_details_by_resources
WHERE region = '{{ region }}' -- required
;