compliance_details
Creates, updates, deletes, gets or lists a compliance_details resource.
Overview
| Name | compliance_details |
| Type | Resource |
| Id | aws.fms.compliance_details |
Fields
The following fields are returned by SELECT queries:
- get_compliance_detail
| Name | Datatype | Description |
|---|---|---|
evaluation_limit_exceeded | boolean | Indicates if over 100 resources are noncompliant with the Firewall Manager policy. |
expired_at | string (date-time) | A timestamp that indicates when the returned information should be considered out of date. |
issue_info_map | object | Details about problems with dependent services, such as WAF or Config, and the error message received that indicates the problem with the service. |
member_account | string | The Amazon Web Services account ID. (pattern: <code>^[0-9]+$</code>) |
policy_id | string | The ID of the Firewall Manager policy. (pattern: <code>^[a-z0-9A-Z-]{36}$</code>) |
policy_owner | string | The Amazon Web Services account that created the Firewall Manager policy. (pattern: <code>^[0-9]+$</code>) |
violators | array | An array of resources that aren't protected by the WAF or Shield Advanced policy or that aren't in compliance with the security group policy. |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get_compliance_detail | select | region | Returns detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy. The reasons for resources being considered compliant depend on the Firewall Manager policy type. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
region | string | AWS region (default: us-east-1) |
SELECT examples
- get_compliance_detail
Returns detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy. The reasons for resources being considered compliant depend on the Firewall Manager policy type.
SELECT
evaluation_limit_exceeded,
expired_at,
issue_info_map,
member_account,
policy_id,
policy_owner,
violators
FROM aws.fms.compliance_details
WHERE region = '{{ region }}' -- required
;