amazonka-config-1.4.3: Amazon Config SDK.

Copyright(c) 2013-2016 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone
LanguageHaskell2010

Network.AWS.Config.DescribeComplianceByConfigRule

Contents

Description

Indicates whether the specified AWS Config rules are compliant. If a rule is noncompliant, this action returns the number of AWS resources that do not comply with the rule.

A rule is compliant if all of the evaluated resources comply with it, and it is noncompliant if any of these resources do not comply.

If AWS Config has no current evaluation results for the rule, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions:

  • AWS Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime.
  • The rule's AWS Lambda function is failing to send evaluation results to AWS Config. Verify that the role that you assigned to your configuration recorder includes the 'config:PutEvaluations' permission. If the rule is a customer managed rule, verify that the AWS Lambda execution role includes the 'config:PutEvaluations' permission.
  • The rule's AWS Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.

Synopsis

Creating a Request

describeComplianceByConfigRule :: DescribeComplianceByConfigRule Source #

Creates a value of DescribeComplianceByConfigRule with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

data DescribeComplianceByConfigRule Source #

See: describeComplianceByConfigRule smart constructor.

Instances

Eq DescribeComplianceByConfigRule Source # 
Data DescribeComplianceByConfigRule Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> DescribeComplianceByConfigRule -> c DescribeComplianceByConfigRule #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c DescribeComplianceByConfigRule #

toConstr :: DescribeComplianceByConfigRule -> Constr #

dataTypeOf :: DescribeComplianceByConfigRule -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c DescribeComplianceByConfigRule) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c DescribeComplianceByConfigRule) #

gmapT :: (forall b. Data b => b -> b) -> DescribeComplianceByConfigRule -> DescribeComplianceByConfigRule #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> DescribeComplianceByConfigRule -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> DescribeComplianceByConfigRule -> r #

gmapQ :: (forall d. Data d => d -> u) -> DescribeComplianceByConfigRule -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> DescribeComplianceByConfigRule -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRule -> m DescribeComplianceByConfigRule #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRule -> m DescribeComplianceByConfigRule #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRule -> m DescribeComplianceByConfigRule #

Read DescribeComplianceByConfigRule Source # 
Show DescribeComplianceByConfigRule Source # 
Generic DescribeComplianceByConfigRule Source # 
ToJSON DescribeComplianceByConfigRule Source # 
Hashable DescribeComplianceByConfigRule Source # 
NFData DescribeComplianceByConfigRule Source # 
AWSRequest DescribeComplianceByConfigRule Source # 
ToPath DescribeComplianceByConfigRule Source # 
ToHeaders DescribeComplianceByConfigRule Source # 
ToQuery DescribeComplianceByConfigRule Source # 
type Rep DescribeComplianceByConfigRule Source # 
type Rep DescribeComplianceByConfigRule = D1 (MetaData "DescribeComplianceByConfigRule" "Network.AWS.Config.DescribeComplianceByConfigRule" "amazonka-config-1.4.3-6dEKTXSzLg81CPzXP0Z06u" False) (C1 (MetaCons "DescribeComplianceByConfigRule'" PrefixI True) ((:*:) (S1 (MetaSel (Just Symbol "_dcbcrConfigRuleNames") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [Text]))) ((:*:) (S1 (MetaSel (Just Symbol "_dcbcrComplianceTypes") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [ComplianceType]))) (S1 (MetaSel (Just Symbol "_dcbcrNextToken") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))))))
type Rs DescribeComplianceByConfigRule Source # 

Request Lenses

dcbcrConfigRuleNames :: Lens' DescribeComplianceByConfigRule [Text] Source #

Specify one or more AWS Config rule names to filter the results by rule.

dcbcrComplianceTypes :: Lens' DescribeComplianceByConfigRule [ComplianceType] Source #

Filters the results by compliance.

The allowed values are COMPLIANT, NON_COMPLIANT, and INSUFFICIENT_DATA.

dcbcrNextToken :: Lens' DescribeComplianceByConfigRule (Maybe Text) Source #

The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.

Destructuring the Response

describeComplianceByConfigRuleResponse Source #

Creates a value of DescribeComplianceByConfigRuleResponse with the minimum fields required to make a request.

Use one of the following lenses to modify other fields as desired:

data DescribeComplianceByConfigRuleResponse Source #

Instances

Eq DescribeComplianceByConfigRuleResponse Source # 
Data DescribeComplianceByConfigRuleResponse Source # 

Methods

gfoldl :: (forall d b. Data d => c (d -> b) -> d -> c b) -> (forall g. g -> c g) -> DescribeComplianceByConfigRuleResponse -> c DescribeComplianceByConfigRuleResponse #

gunfold :: (forall b r. Data b => c (b -> r) -> c r) -> (forall r. r -> c r) -> Constr -> c DescribeComplianceByConfigRuleResponse #

toConstr :: DescribeComplianceByConfigRuleResponse -> Constr #

dataTypeOf :: DescribeComplianceByConfigRuleResponse -> DataType #

dataCast1 :: Typeable (* -> *) t => (forall d. Data d => c (t d)) -> Maybe (c DescribeComplianceByConfigRuleResponse) #

dataCast2 :: Typeable (* -> * -> *) t => (forall d e. (Data d, Data e) => c (t d e)) -> Maybe (c DescribeComplianceByConfigRuleResponse) #

gmapT :: (forall b. Data b => b -> b) -> DescribeComplianceByConfigRuleResponse -> DescribeComplianceByConfigRuleResponse #

gmapQl :: (r -> r' -> r) -> r -> (forall d. Data d => d -> r') -> DescribeComplianceByConfigRuleResponse -> r #

gmapQr :: (r' -> r -> r) -> r -> (forall d. Data d => d -> r') -> DescribeComplianceByConfigRuleResponse -> r #

gmapQ :: (forall d. Data d => d -> u) -> DescribeComplianceByConfigRuleResponse -> [u] #

gmapQi :: Int -> (forall d. Data d => d -> u) -> DescribeComplianceByConfigRuleResponse -> u #

gmapM :: Monad m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRuleResponse -> m DescribeComplianceByConfigRuleResponse #

gmapMp :: MonadPlus m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRuleResponse -> m DescribeComplianceByConfigRuleResponse #

gmapMo :: MonadPlus m => (forall d. Data d => d -> m d) -> DescribeComplianceByConfigRuleResponse -> m DescribeComplianceByConfigRuleResponse #

Read DescribeComplianceByConfigRuleResponse Source # 
Show DescribeComplianceByConfigRuleResponse Source # 
Generic DescribeComplianceByConfigRuleResponse Source # 
NFData DescribeComplianceByConfigRuleResponse Source # 
type Rep DescribeComplianceByConfigRuleResponse Source # 
type Rep DescribeComplianceByConfigRuleResponse = D1 (MetaData "DescribeComplianceByConfigRuleResponse" "Network.AWS.Config.DescribeComplianceByConfigRule" "amazonka-config-1.4.3-6dEKTXSzLg81CPzXP0Z06u" False) (C1 (MetaCons "DescribeComplianceByConfigRuleResponse'" PrefixI True) ((:*:) (S1 (MetaSel (Just Symbol "_dcbcrrsComplianceByConfigRules") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe [ComplianceByConfigRule]))) ((:*:) (S1 (MetaSel (Just Symbol "_dcbcrrsNextToken") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 (Maybe Text))) (S1 (MetaSel (Just Symbol "_dcbcrrsResponseStatus") NoSourceUnpackedness SourceStrict DecidedStrict) (Rec0 Int)))))

Response Lenses

dcbcrrsComplianceByConfigRules :: Lens' DescribeComplianceByConfigRuleResponse [ComplianceByConfigRule] Source #

Indicates whether each of the specified AWS Config rules is compliant.

dcbcrrsNextToken :: Lens' DescribeComplianceByConfigRuleResponse (Maybe Text) Source #

The string that you use in a subsequent request to get the next page of results in a paginated response.