compliance_status

Creates, updates, deletes, gets or lists a compliance_status resource.

Overview

Name	compliance_status
Type	Resource
Id	aws.fms.compliance_status

Fields

The following fields are returned by SELECT queries:

list_compliance_status

Name	Datatype	Description
evaluation_results	array	An array of EvaluationResult objects.
issue_info_map	object	Details about problems with dependent services, such as WAF or Config, and the error message received that indicates the problem with the service.
last_updated	string (date-time)	Timestamp of the last update to the EvaluationResult objects.
member_account	string	The member account ID. (pattern: <code>^[0-9]+$</code>)
policy_id	string	The ID of the Firewall Manager policy. (pattern: <code>^[a-z0-9A-Z-]{36}$</code>)
policy_name	string	The name of the Firewall Manager policy. (pattern: <code>^([\p{L}\p{Z}\p{N}_.:/=+-@]*)$</code>)
policy_owner	string	The Amazon Web Services account that created the Firewall Manager policy. (pattern: <code>^[0-9]+$</code>)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
list_compliance_status	select	region		Returns an array of PolicyComplianceStatus objects. Use PolicyComplianceStatus to get a summary of which member accounts are protected by the specified policy.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

list_compliance_status

Returns an array of PolicyComplianceStatus objects. Use PolicyComplianceStatus to get a summary of which member accounts are protected by the specified policy.

SELECT
evaluation_results,
issue_info_map,
last_updated,
member_account,
policy_id,
policy_name,
policy_owner
FROM aws.fms.compliance_status
WHERE region = '{{ region }}' -- required
;