amazonka-config-1.3.3: Amazon Config SDK.

Copyright(c) 2013-2015 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone
LanguageHaskell2010

Network.AWS.Config.Types

Contents

Description

 

Synopsis

Service Configuration

config :: Service Source

API version '2014-11-12' of the Amazon Config SDK configuration.

Errors

_InvalidTimeRangeException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified time range is not valid. The earlier time is not chronologically before the later time.

_InvalidSNSTopicARNException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified Amazon SNS topic does not exist.

_InvalidRecordingGroupException :: AsError a => Getting (First ServiceError) a ServiceError Source

AWS Config throws an exception if the recording group does not contain a valid list of resource types. Invalid values could also be incorrectly formatted.

_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source

The requested action is not valid.

_InvalidRoleException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have provided a null or empty role ARN.

_LastDeliveryChannelDeleteFailedException :: AsError a => Getting (First ServiceError) a ServiceError Source

You cannot delete the delivery channel you specified because the configuration recorder is running.

_InvalidLimitException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified limit is outside the allowable range.

_InvalidDeliveryChannelNameException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified delivery channel name is not valid.

_InvalidParameterValueException :: AsError a => Getting (First ServiceError) a ServiceError Source

One or more of the specified parameters are invalid. Verify that your parameters are valid and try again.

_InvalidResultTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source

The result token is invalid.

_NoSuchDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have specified a delivery channel that does not exist.

_NoSuchConfigRuleException :: AsError a => Getting (First ServiceError) a ServiceError Source

One or more AWS Config rules in the request are invalid. Verify that the rule names are correct and try again.

_ResourceNotDiscoveredException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have specified a resource that is either unknown or has not been discovered.

_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified next token is invalid. Specify the nextToken string that was returned in the previous response to get the next page of results.

_MaxNumberOfConfigRulesExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source

Failed to add the AWS Config rule because the account already contains the maximum number of 25 rules. Consider deleting any deactivated rules before adding new rules.

_NoAvailableConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source

There are no configuration recorders available to provide the role needed to describe your resources. Create a configuration recorder.

_NoSuchBucketException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified Amazon S3 bucket does not exist.

_NoAvailableDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source

There is no delivery channel available to record configurations.

_InvalidConfigurationRecorderNameException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have provided a configuration recorder name that is not valid.

_NoRunningConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source

There is no configuration recorder running.

_MaxNumberOfConfigurationRecordersExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have reached the limit on the number of recorders you can create.

_InsufficientDeliveryPolicyException :: AsError a => Getting (First ServiceError) a ServiceError Source

Your Amazon S3 bucket policy does not permit AWS Config to write to it.

_MaxNumberOfDeliveryChannelsExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have reached the limit on the number of delivery channels you can create.

_NoSuchConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source

You have specified a configuration recorder that does not exist.

_InvalidS3KeyPrefixException :: AsError a => Getting (First ServiceError) a ServiceError Source

The specified Amazon S3 key prefix is not valid.

_ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source

The rule is currently being deleted. Wait for a while and try again.

ChronologicalOrder

data ChronologicalOrder Source

Constructors

Forward 
Reverse 

Instances

ComplianceType

data ComplianceType Source

Constructors

Compliant 
InsufficientData 
NonCompliant 
NotApplicable 

Instances

ConfigRuleState

data ConfigRuleState Source

Constructors

Active 
Deleting 

Instances

ConfigurationItemStatus

data ConfigurationItemStatus Source

Constructors

Deleted 
Discovered 
Failed 
OK 

Instances

DeliveryStatus

data DeliveryStatus Source

Constructors

DSFailure 
DSNotApplicable 
DSSuccess 

Instances

EventSource

data EventSource Source

Constructors

AWS_Config 

Instances

MaximumExecutionFrequency

data MaximumExecutionFrequency Source

Constructors

OneHour 
SixHours 
ThreeHours 
TwelveHours 
TwentyFourHours 

Instances

MessageType

data MessageType Source

Constructors

ConfigurationItemChangeNotification 
ConfigurationSnapshotDeliveryCompleted 

Instances

Owner

data Owner Source

Constructors

AWS 
CustomLambda 

Instances

RecorderStatus

data RecorderStatus Source

Constructors

Failure 
Pending 
Success 

Instances

ResourceType

data ResourceType Source

Constructors

AWSCloudTrailTrail 
AWSEC2CustomerGateway 
AWSEC2EIP 
AWSEC2Instance 
AWSEC2InternetGateway 
AWSEC2NetworkACL 
AWSEC2NetworkInterface 
AWSEC2RouteTable 
AWSEC2SecurityGroup 
AWSEC2Subnet 
AWSEC2VPC 
AWSEC2VPNConnection 
AWSEC2VPNGateway 
AWSEC2Volume 

Instances

Compliance

data Compliance Source

Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.

See: compliance smart constructor.

Instances

compliance :: Compliance Source

Creates a value of Compliance with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cComplianceContributorCount :: Lens' Compliance (Maybe ComplianceContributorCount) Source

The number of AWS resources or AWS Config rules that cause a result of NON_COMPLIANT, up to a maximum of 25.

cComplianceType :: Lens' Compliance (Maybe ComplianceType) Source

Indicates whether an AWS resource or AWS Config rule is compliant.

A resource is compliant if it complies with all of the AWS Config rules that evaluate it, and it is noncompliant if it does not comply with one or more of these rules.

A rule is compliant if all of the resources that the rule evaluates comply with it, and it is noncompliant if any of these resources do not comply.

ComplianceByConfigRule

data ComplianceByConfigRule Source

Indicates whether an AWS Config rule is compliant. A rule is compliant if all of the resources that the rule evaluated comply with it, and it is noncompliant if any of these resources do not comply.

See: complianceByConfigRule smart constructor.

Instances

complianceByConfigRule :: ComplianceByConfigRule Source

Creates a value of ComplianceByConfigRule with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cbcrCompliance :: Lens' ComplianceByConfigRule (Maybe Compliance) Source

Indicates whether the AWS Config rule is compliant.

cbcrConfigRuleName :: Lens' ComplianceByConfigRule (Maybe Text) Source

The name of the AWS Config rule.

ComplianceByResource

data ComplianceByResource Source

Indicates whether an AWS resource that is evaluated according to one or more AWS Config rules is compliant. A resource is compliant if it complies with all of the rules that evaluate it, and it is noncompliant if it does not comply with one or more of these rules.

See: complianceByResource smart constructor.

Instances

complianceByResource :: ComplianceByResource Source

Creates a value of ComplianceByResource with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cbrResourceId :: Lens' ComplianceByResource (Maybe Text) Source

The ID of the AWS resource that was evaluated.

cbrResourceType :: Lens' ComplianceByResource (Maybe Text) Source

The type of the AWS resource that was evaluated.

cbrCompliance :: Lens' ComplianceByResource (Maybe Compliance) Source

Indicates whether the AWS resource complies with all of the AWS Config rules that evaluated it.

ComplianceContributorCount

data ComplianceContributorCount Source

The number of AWS resources or AWS Config rules responsible for the current compliance of the item, up to a maximum number.

See: complianceContributorCount smart constructor.

Instances

complianceContributorCount :: ComplianceContributorCount Source

Creates a value of ComplianceContributorCount with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cccCappedCount :: Lens' ComplianceContributorCount (Maybe Int) Source

The number of AWS resources or AWS Config rules responsible for the current compliance of the item.

cccCapExceeded :: Lens' ComplianceContributorCount (Maybe Bool) Source

Indicates whether the maximum count is reached.

ComplianceSummary

data ComplianceSummary Source

The number of AWS Config rules or AWS resources that are compliant and noncompliant, up to a maximum.

See: complianceSummary smart constructor.

Instances

complianceSummary :: ComplianceSummary Source

Creates a value of ComplianceSummary with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

csComplianceSummaryTimestamp :: Lens' ComplianceSummary (Maybe UTCTime) Source

The time that AWS Config created the compliance summary.

csCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source

The number of AWS Config rules or AWS resources that are compliant, up to a maximum of 25 for rules and 100 for resources.

csNonCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source

The number of AWS Config rules or AWS resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.

ComplianceSummaryByResourceType

data ComplianceSummaryByResourceType Source

The number of AWS resources of a specific type that are compliant or noncompliant, up to a maximum of 100 for each compliance.

See: complianceSummaryByResourceType smart constructor.

Instances

complianceSummaryByResourceType :: ComplianceSummaryByResourceType Source

Creates a value of ComplianceSummaryByResourceType with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

csbrtResourceType :: Lens' ComplianceSummaryByResourceType (Maybe Text) Source

The type of AWS resource.

csbrtComplianceSummary :: Lens' ComplianceSummaryByResourceType (Maybe ComplianceSummary) Source

The number of AWS resources that are compliant or noncompliant, up to a maximum of 100 for each compliance.

ConfigExportDeliveryInfo

data ConfigExportDeliveryInfo Source

A list that contains the status of the delivery of either the snapshot or the configuration history to the specified Amazon S3 bucket.

See: configExportDeliveryInfo smart constructor.

Instances

configExportDeliveryInfo :: ConfigExportDeliveryInfo Source

Creates a value of ConfigExportDeliveryInfo with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cediLastErrorCode :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source

The error code from the last attempted delivery.

cediLastAttemptTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source

The time of the last attempted delivery.

cediLastSuccessfulTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source

The time of the last successful delivery.

cediLastStatus :: Lens' ConfigExportDeliveryInfo (Maybe DeliveryStatus) Source

Status of the last attempted delivery.

cediLastErrorMessage :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source

The error message from the last attempted delivery.

cediNextDeliveryTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source

The time that the next delivery occurs.

ConfigRule

data ConfigRule Source

An AWS Lambda function that evaluates configuration items to assess whether your AWS resources comply with your desired configurations. This function can run when AWS Config detects a configuration change or delivers a configuration snapshot. This function can evaluate any resource in the recording group. To define which of these are evaluated, specify a value for the Scope key.

For more information about developing and using AWS Config rules, see Evaluating AWS Resource Configurations with AWS Config in the AWS Config Developer Guide.

See: configRule smart constructor.

Instances

configRule Source

Arguments

:: Source

crSource

-> ConfigRule 

Creates a value of ConfigRule with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

crInputParameters :: Lens' ConfigRule (Maybe Text) Source

A string in JSON format that is passed to the AWS Config rule Lambda function.

crConfigRuleName :: Lens' ConfigRule (Maybe Text) Source

The name that you assign to the AWS Config rule. The name is required if you are adding a new rule.

crMaximumExecutionFrequency :: Lens' ConfigRule (Maybe MaximumExecutionFrequency) Source

The maximum frequency at which the AWS Config rule runs evaluations.

If your rule is periodic, meaning it runs an evaluation when AWS Config delivers a configuration snapshot, then it cannot run evaluations more frequently than AWS Config delivers the snapshots. For periodic rules, set the value of the MaximumExecutionFrequency key to be equal to or greater than the value of the deliveryFrequency key, which is part of ConfigSnapshotDeliveryProperties. To update the frequency with which AWS Config delivers your snapshots, use the PutDeliveryChannel action.

crConfigRuleId :: Lens' ConfigRule (Maybe Text) Source

The ID of the AWS Config rule.

crScope :: Lens' ConfigRule (Maybe Scope) Source

Defines which resources the AWS Config rule evaluates. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one or more resource IDs. Specify a scope to constrain the resources that are evaluated. If you do not specify a scope, the AWS Config Rule evaluates all resources in the recording group.

crConfigRuleState :: Lens' ConfigRule (Maybe ConfigRuleState) Source

Indicates whether the AWS Config rule is active or currently being deleted by AWS Config.

AWS Config sets the state of a rule to DELETING temporarily after you use the DeleteConfigRule request to delete the rule. After AWS Config finishes deleting a rule, the rule and all of its evaluations are erased and no longer available.

You cannot add a rule to AWS Config that has the state set to DELETING. If you want to delete a rule, you must use the DeleteConfigRule request.

crDescription :: Lens' ConfigRule (Maybe Text) Source

The description that you provide for the AWS Config rule.

crConfigRuleARN :: Lens' ConfigRule (Maybe Text) Source

The Amazon Resource Name (ARN) of the AWS Config rule.

crSource :: Lens' ConfigRule Source Source

Provides the rule owner (AWS or customer), the rule identifier, and the events that cause the function to evaluate your AWS resources.

ConfigRuleEvaluationStatus

data ConfigRuleEvaluationStatus Source

Status information for your AWS managed Config rules. The status includes information such as the last time the rule ran, the last time it failed, and the related error for the last failure.

This action does not return status information about customer managed Config rules.

See: configRuleEvaluationStatus smart constructor.

Instances

configRuleEvaluationStatus :: ConfigRuleEvaluationStatus Source

Creates a value of ConfigRuleEvaluationStatus with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

cresLastErrorCode :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source

The error code that AWS Config returned when the rule last failed.

cresFirstActivatedTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source

The time that you first activated the AWS Config rule.

cresConfigRuleName :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source

The name of the AWS Config rule.

cresLastErrorMessage :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source

The error message that AWS Config returned when the rule last failed.

cresConfigRuleId :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source

The ID of the AWS Config rule.

cresLastFailedInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source

The time that AWS Config last failed to invoke the AWS Config rule to evaluate your AWS resources.

cresLastSuccessfulInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source

The time that AWS Config last successfully invoked the AWS Config rule to evaluate your AWS resources.

cresConfigRuleARN :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source

The Amazon Resource Name (ARN) of the AWS Config rule.

ConfigSnapshotDeliveryProperties

data ConfigSnapshotDeliveryProperties Source

Options for how AWS Config delivers configuration snapshots to the Amazon S3 bucket in your delivery channel.

See: configSnapshotDeliveryProperties smart constructor.

Instances

configSnapshotDeliveryProperties :: ConfigSnapshotDeliveryProperties Source

Creates a value of ConfigSnapshotDeliveryProperties with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

csdpDeliveryFrequency :: Lens' ConfigSnapshotDeliveryProperties (Maybe MaximumExecutionFrequency) Source

The frequency with which a AWS Config recurringly delivers configuration snapshots.

ConfigStreamDeliveryInfo

data ConfigStreamDeliveryInfo Source

A list that contains the status of the delivery of the configuration stream notification to the Amazon SNS topic.

See: configStreamDeliveryInfo smart constructor.

Instances

configStreamDeliveryInfo :: ConfigStreamDeliveryInfo Source

Creates a value of ConfigStreamDeliveryInfo with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

csdiLastErrorCode :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source

The error code from the last attempted delivery.

csdiLastStatusChangeTime :: Lens' ConfigStreamDeliveryInfo (Maybe UTCTime) Source

The time from the last status change.

csdiLastStatus :: Lens' ConfigStreamDeliveryInfo (Maybe DeliveryStatus) Source

Status of the last attempted delivery.

Note Providing an SNS topic on a DeliveryChannel for AWS Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable.

csdiLastErrorMessage :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source

The error message from the last attempted delivery.

ConfigurationItem

data ConfigurationItem Source

A list that contains detailed configurations of a specified resource.

Currently, the list does not contain information about non-AWS components (for example, applications on your Amazon EC2 instances).

See: configurationItem smart constructor.

Instances

configurationItem :: ConfigurationItem Source

Creates a value of ConfigurationItem with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

ciResourceId :: Lens' ConfigurationItem (Maybe Text) Source

The ID of the resource (for example., 'sg-xxxxxx').

ciResourceType :: Lens' ConfigurationItem (Maybe ResourceType) Source

The type of AWS resource.

ciConfigurationStateId :: Lens' ConfigurationItem (Maybe Text) Source

An identifier that indicates the ordering of the configuration items of a resource.

ciArn :: Lens' ConfigurationItem (Maybe Text) Source

The Amazon Resource Name (ARN) of the resource.

ciResourceName :: Lens' ConfigurationItem (Maybe Text) Source

The custom name of the resource, if available.

ciResourceCreationTime :: Lens' ConfigurationItem (Maybe UTCTime) Source

The time stamp when the resource was created.

ciConfigurationItemStatus :: Lens' ConfigurationItem (Maybe ConfigurationItemStatus) Source

The configuration item status.

ciConfigurationItemCaptureTime :: Lens' ConfigurationItem (Maybe UTCTime) Source

The time when the configuration recording was initiated.

ciAccountId :: Lens' ConfigurationItem (Maybe Text) Source

The 12 digit AWS account ID associated with the resource.

ciAvailabilityZone :: Lens' ConfigurationItem (Maybe Text) Source

The Availability Zone associated with the resource.

ciRelationships :: Lens' ConfigurationItem [Relationship] Source

A list of related AWS resources.

ciVersion :: Lens' ConfigurationItem (Maybe Text) Source

The version number of the resource configuration.

ciAwsRegion :: Lens' ConfigurationItem (Maybe Text) Source

The region where the resource resides.

ciRelatedEvents :: Lens' ConfigurationItem [Text] Source

A list of CloudTrail event IDs.

A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What is AWS CloudTrail?.

An empty field indicates that the current configuration was not initiated by any event.

ciConfiguration :: Lens' ConfigurationItem (Maybe Text) Source

The description of the resource configuration.

ciConfigurationItemMD5Hash :: Lens' ConfigurationItem (Maybe Text) Source

Unique MD5 hash that represents the configuration item's state.

You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.

ciTags :: Lens' ConfigurationItem (HashMap Text Text) Source

A mapping of key value tags associated with the resource.

ConfigurationRecorder

data ConfigurationRecorder Source

An object that represents the recording of configuration changes of an AWS resource.

See: configurationRecorder smart constructor.

Instances

configurationRecorder :: ConfigurationRecorder Source

Creates a value of ConfigurationRecorder with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

crName :: Lens' ConfigurationRecorder (Maybe Text) Source

The name of the recorder. By default, AWS Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.

crRecordingGroup :: Lens' ConfigurationRecorder (Maybe RecordingGroup) Source

The recording group specifies either to record configurations for all supported resources or to provide a list of resource types to record. The list of resource types must be a subset of supported resource types.

crRoleARN :: Lens' ConfigurationRecorder (Maybe Text) Source

Amazon Resource Name (ARN) of the IAM role used to describe the AWS resources associated with the account.

ConfigurationRecorderStatus

data ConfigurationRecorderStatus Source

The current status of the configuration recorder.

See: configurationRecorderStatus smart constructor.

Instances

configurationRecorderStatus :: ConfigurationRecorderStatus Source

Creates a value of ConfigurationRecorderStatus with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

crsLastErrorCode :: Lens' ConfigurationRecorderStatus (Maybe Text) Source

The error code indicating that the recording failed.

crsLastStopTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source

The time the recorder was last stopped.

crsLastStatusChangeTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source

The time when the status was last changed.

crsRecording :: Lens' ConfigurationRecorderStatus (Maybe Bool) Source

Specifies whether the recorder is currently recording or not.

crsLastStatus :: Lens' ConfigurationRecorderStatus (Maybe RecorderStatus) Source

The last (previous) status of the recorder.

crsLastErrorMessage :: Lens' ConfigurationRecorderStatus (Maybe Text) Source

The message indicating that the recording failed due to an error.

crsName :: Lens' ConfigurationRecorderStatus (Maybe Text) Source

The name of the configuration recorder.

crsLastStartTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source

The time the recorder was last started.

DeliveryChannel

data DeliveryChannel Source

A logical container used for storing the configuration changes of an AWS resource.

See: deliveryChannel smart constructor.

Instances

deliveryChannel :: DeliveryChannel Source

Creates a value of DeliveryChannel with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

dcS3KeyPrefix :: Lens' DeliveryChannel (Maybe Text) Source

The prefix for the specified Amazon S3 bucket.

dcSnsTopicARN :: Lens' DeliveryChannel (Maybe Text) Source

The Amazon Resource Name (ARN) of the SNS topic that AWS Config delivers notifications to.

dcName :: Lens' DeliveryChannel (Maybe Text) Source

The name of the delivery channel. By default, AWS Config automatically assigns the name "default" when creating the delivery channel. You cannot change the assigned name.

dcConfigSnapshotDeliveryProperties :: Lens' DeliveryChannel (Maybe ConfigSnapshotDeliveryProperties) Source

Undocumented member.

dcS3BucketName :: Lens' DeliveryChannel (Maybe Text) Source

The name of the Amazon S3 bucket used to store configuration history for the delivery channel.

DeliveryChannelStatus

data DeliveryChannelStatus Source

The status of a specified delivery channel.

Valid values: Success | Failure

See: deliveryChannelStatus smart constructor.

Instances

deliveryChannelStatus :: DeliveryChannelStatus Source

Creates a value of DeliveryChannelStatus with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

dcsConfigSnapshotDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source

A list containing the status of the delivery of the snapshot to the specified Amazon S3 bucket.

dcsConfigStreamDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigStreamDeliveryInfo) Source

A list containing the status of the delivery of the configuration stream notification to the specified Amazon SNS topic.

dcsConfigHistoryDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source

A list that contains the status of the delivery of the configuration history to the specified Amazon S3 bucket.

dcsName :: Lens' DeliveryChannelStatus (Maybe Text) Source

The name of the delivery channel.

Evaluation

data Evaluation Source

Identifies an AWS resource and indicates whether it complies with the AWS Config rule that it was evaluated against.

See: evaluation smart constructor.

Instances

evaluation Source

Arguments

:: Text

eComplianceResourceType

-> Text

eComplianceResourceId

-> ComplianceType

eComplianceType

-> UTCTime

eOrderingTimestamp

-> Evaluation 

Creates a value of Evaluation with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

eAnnotation :: Lens' Evaluation (Maybe Text) Source

Supplementary information about how the evaluation determined the compliance.

eComplianceResourceType :: Lens' Evaluation Text Source

The type of AWS resource that was evaluated.

eComplianceResourceId :: Lens' Evaluation Text Source

The ID of the AWS resource that was evaluated.

eComplianceType :: Lens' Evaluation ComplianceType Source

Indicates whether the AWS resource complies with the AWS Config rule that it was evaluated against.

eOrderingTimestamp :: Lens' Evaluation UTCTime Source

The time of the event in AWS Config that triggered the evaluation. For event-based evaluations, the time indicates when AWS Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when AWS Config delivered the configuration snapshot that triggered the evaluation.

EvaluationResult

data EvaluationResult Source

The details of an AWS Config evaluation. Provides the AWS resource that was evaluated, the compliance of the resource, related timestamps, and supplementary information.

See: evaluationResult smart constructor.

Instances

evaluationResult :: EvaluationResult Source

Creates a value of EvaluationResult with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

erEvaluationResultIdentifier :: Lens' EvaluationResult (Maybe EvaluationResultIdentifier) Source

Uniquely identifies the evaluation result.

erAnnotation :: Lens' EvaluationResult (Maybe Text) Source

Supplementary information about how the evaluation determined the compliance.

erConfigRuleInvokedTime :: Lens' EvaluationResult (Maybe UTCTime) Source

The time when the AWS Config rule evaluated the AWS resource.

erResultRecordedTime :: Lens' EvaluationResult (Maybe UTCTime) Source

The time when AWS Config recorded the evaluation result.

erResultToken :: Lens' EvaluationResult (Maybe Text) Source

An encrypted token that associates an evaluation with an AWS Config rule. The token identifies the rule, the AWS resource being evaluated, and the event that triggered the evaluation.

erComplianceType :: Lens' EvaluationResult (Maybe ComplianceType) Source

Indicates whether the AWS resource complies with the AWS Config rule that evaluated it.

EvaluationResultIdentifier

data EvaluationResultIdentifier Source

Uniquely identifies an evaluation result.

See: evaluationResultIdentifier smart constructor.

Instances

evaluationResultIdentifier :: EvaluationResultIdentifier Source

Creates a value of EvaluationResultIdentifier with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

eriEvaluationResultQualifier :: Lens' EvaluationResultIdentifier (Maybe EvaluationResultQualifier) Source

Identifies an AWS Config rule used to evaluate an AWS resource, and provides the type and ID of the evaluated resource.

eriOrderingTimestamp :: Lens' EvaluationResultIdentifier (Maybe UTCTime) Source

The time of the event that triggered the evaluation of your AWS resources. The time can indicate when AWS Config delivered a configuration item change notification, or it can indicate when AWS Config delivered the configuration snapshot, depending on which event triggered the evaluation.

EvaluationResultQualifier

data EvaluationResultQualifier Source

Identifies an AWS Config rule that evaluated an AWS resource, and provides the type and ID of the resource that the rule evaluated.

See: evaluationResultQualifier smart constructor.

Instances

evaluationResultQualifier :: EvaluationResultQualifier Source

Creates a value of EvaluationResultQualifier with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

erqResourceId :: Lens' EvaluationResultQualifier (Maybe Text) Source

The ID of the evaluated AWS resource.

erqResourceType :: Lens' EvaluationResultQualifier (Maybe Text) Source

The type of AWS resource that was evaluated.

erqConfigRuleName :: Lens' EvaluationResultQualifier (Maybe Text) Source

The name of the AWS Config rule that was used in the evaluation.

RecordingGroup

data RecordingGroup Source

The group of AWS resource types that AWS Config records when starting the configuration recorder.

recordingGroup can have one and only one parameter. Choose either allSupported or resourceTypes.

See: recordingGroup smart constructor.

Instances

recordingGroup :: RecordingGroup Source

Creates a value of RecordingGroup with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

rgAllSupported :: Lens' RecordingGroup (Maybe Bool) Source

Records all supported resource types in the recording group. For a list of supported resource types, see Supported resource types. If you specify allSupported, you cannot enumerate a list of resourceTypes.

rgResourceTypes :: Lens' RecordingGroup [ResourceType] Source

A comma-separated list of strings representing valid AWS resource types (for example, 'AWS::EC2::Instance' or 'AWS::CloudTrail::Trail'). resourceTypes is only valid if you have chosen not to select allSupported. For a list of valid resourceTypes values, see the resourceType Value column in the following topic: Supported AWS Resource Types.

Relationship

data Relationship Source

The relationship of the related resource to the main resource.

See: relationship smart constructor.

Instances

relationship :: Relationship Source

Creates a value of Relationship with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

rResourceId :: Lens' Relationship (Maybe Text) Source

The ID of the related resource (for example, 'sg-xxxxxx').

rResourceType :: Lens' Relationship (Maybe ResourceType) Source

The resource type of the related resource.

rResourceName :: Lens' Relationship (Maybe Text) Source

The custom name of the related resource, if available.

rRelationshipName :: Lens' Relationship (Maybe Text) Source

The type of relationship with the related resource.

ResourceIdentifier

data ResourceIdentifier Source

The details that identify a resource that is discovered by AWS Config, including the resource type, ID, and (if available) the custom resource name.

See: resourceIdentifier smart constructor.

Instances

resourceIdentifier :: ResourceIdentifier Source

Creates a value of ResourceIdentifier with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

riResourceId :: Lens' ResourceIdentifier (Maybe Text) Source

The ID of the resource (for example., 'sg-xxxxxx').

riResourceType :: Lens' ResourceIdentifier (Maybe ResourceType) Source

The type of resource.

riResourceName :: Lens' ResourceIdentifier (Maybe Text) Source

The custom name of the resource (if available).

riResourceDeletionTime :: Lens' ResourceIdentifier (Maybe UTCTime) Source

The time that the resource was deleted.

Scope

data Scope Source

Defines which resources AWS Config evaluates against a rule. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one or more resource IDs. Specify a scope to constrain the resources to be evaluated. If you do not specify a scope, all resources in your recording group are evaluated against the rule.

See: scope smart constructor.

Instances

scope :: Scope Source

Creates a value of Scope with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

sComplianceResourceTypes :: Lens' Scope [Text] Source

The resource types of only those AWS resources that you want AWS Config to evaluate against the rule. You can specify only one type if you also specify resource IDs for ComplianceResourceId.

sComplianceResourceId :: Lens' Scope (Maybe Text) Source

The IDs of only those AWS resources that you want AWS Config to evaluate against the rule. If you specify a resource ID, you must specify one resource type for ComplianceResourceTypes.

sTagValue :: Lens' Scope (Maybe Text) Source

The tag value applied to only those AWS resources that you want AWS Config to evaluate against the rule. If you specify a value for TagValue, you must also specify a value for TagKey.

sTagKey :: Lens' Scope (Maybe Text) Source

The tag key that is applied to only those AWS resources that you want AWS Config to evaluate against the rule.

Source

data Source Source

Provides the AWS Config rule owner (AWS or customer), the rule identifier, and the events that trigger the evaluation of your AWS resources.

See: source smart constructor.

Instances

source :: Source Source

Creates a value of Source with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

sSourceIdentifier :: Lens' Source (Maybe Text) Source

For AWS managed Config rules, a pre-defined identifier from a list. To reference the list, see Using AWS Managed Config Rules.

For customer managed Config rules, the identifier is the Amazon Resource Name (ARN) of the rule's AWS Lambda function.

sOwner :: Lens' Source (Maybe Owner) Source

Indicates whether AWS or the customer owns and manages the AWS Config rule.

sSourceDetails :: Lens' Source [SourceDetail] Source

Provides the source and type of the event that causes AWS Config to evaluate your AWS resources.

SourceDetail

data SourceDetail Source

Provides the source and type of the event that triggers AWS Config to evaluate your AWS resources against a rule.

See: sourceDetail smart constructor.

Instances

sourceDetail :: SourceDetail Source

Creates a value of SourceDetail with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

sdMessageType :: Lens' SourceDetail (Maybe MessageType) Source

The type of SNS message that triggers AWS Config to run an evaluation. For evaluations that are initiated when AWS Config delivers a configuration item change notification, you must use ConfigurationItemChangeNotification. For evaluations that are initiated when AWS Config delivers a configuration snapshot, you must use ConfigurationSnapshotDeliveryCompleted.

sdEventSource :: Lens' SourceDetail (Maybe EventSource) Source

The source of the event, such as an AWS service, that triggers AWS Config to evaluate your AWS resources.