| Copyright | (c) 2013-2018 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
| Language | Haskell2010 |
Network.AWS.Config.Types
Contents
- Service Configuration
- Errors
- AggregatedSourceStatusType
- AggregatedSourceType
- ChronologicalOrder
- ComplianceType
- ConfigRuleComplianceSummaryGroupKey
- ConfigRuleState
- ConfigurationItemStatus
- DeliveryStatus
- EventSource
- MaximumExecutionFrequency
- MessageType
- Owner
- RecorderStatus
- ResourceType
- AccountAggregationSource
- AggregateComplianceByConfigRule
- AggregateComplianceCount
- AggregateEvaluationResult
- AggregatedSourceStatus
- AggregationAuthorization
- BaseConfigurationItem
- Compliance
- ComplianceByConfigRule
- ComplianceByResource
- ComplianceContributorCount
- ComplianceSummary
- ComplianceSummaryByResourceType
- ConfigExportDeliveryInfo
- ConfigRule
- ConfigRuleComplianceFilters
- ConfigRuleComplianceSummaryFilters
- ConfigRuleEvaluationStatus
- ConfigSnapshotDeliveryProperties
- ConfigStreamDeliveryInfo
- ConfigurationAggregator
- ConfigurationItem
- ConfigurationRecorder
- ConfigurationRecorderStatus
- DeliveryChannel
- DeliveryChannelStatus
- Evaluation
- EvaluationResult
- EvaluationResultIdentifier
- EvaluationResultQualifier
- OrganizationAggregationSource
- PendingAggregationRequest
- RecordingGroup
- Relationship
- ResourceCount
- ResourceIdentifier
- ResourceKey
- Scope
- Source
- SourceDetail
Description
- config :: Service
- _InvalidTimeRangeException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidSNSTopicARNException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRecordingGroupException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableOrganizationException :: AsError a => Getting (First ServiceError) a ServiceError
- _ValidationException :: AsError a => Getting (First ServiceError) a ServiceError
- _OrganizationAccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigurationAggregatorException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRoleException :: AsError a => Getting (First ServiceError) a ServiceError
- _LastDeliveryChannelDeleteFailedException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidLimitException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidDeliveryChannelNameException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidParameterValueException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidResultTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigRuleException :: AsError a => Getting (First ServiceError) a ServiceError
- _OrganizationAllFeaturesNotEnabledException :: AsError a => Getting (First ServiceError) a ServiceError
- _InsufficientPermissionsException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotDiscoveredException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfConfigRulesExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchBucketException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidConfigurationRecorderNameException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoRunningConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfConfigurationRecordersExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _InsufficientDeliveryPolicyException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfDeliveryChannelsExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidS3KeyPrefixException :: AsError a => Getting (First ServiceError) a ServiceError
- _LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError
- data AggregatedSourceStatusType
- data AggregatedSourceType
- data ChronologicalOrder
- data ComplianceType
- data ConfigRuleComplianceSummaryGroupKey
- data ConfigRuleState
- data ConfigurationItemStatus
- data DeliveryStatus
- data EventSource = AWS_Config
- data MaximumExecutionFrequency
- data MessageType
- data Owner
- = AWS
- | CustomLambda
- data RecorderStatus
- data ResourceType
- = AWSAcmCertificate
- | AWSAutoScalingAutoScalingGroup
- | AWSAutoScalingLaunchConfiguration
- | AWSAutoScalingScalingPolicy
- | AWSAutoScalingScheduledAction
- | AWSCloudFormationStack
- | AWSCloudFrontDistribution
- | AWSCloudFrontStreamingDistribution
- | AWSCloudTrailTrail
- | AWSCloudWatchAlarm
- | AWSCodeBuildProject
- | AWSDynamoDBTable
- | AWSEC2CustomerGateway
- | AWSEC2EIP
- | AWSEC2Host
- | AWSEC2Instance
- | AWSEC2InternetGateway
- | AWSEC2NetworkACL
- | AWSEC2NetworkInterface
- | AWSEC2RouteTable
- | AWSEC2SecurityGroup
- | AWSEC2Subnet
- | AWSEC2VPC
- | AWSEC2VPNConnection
- | AWSEC2VPNGateway
- | AWSEC2Volume
- | AWSELASTICLOADBALANCINGV2LoadBalancer
- | AWSElasticBeanstalkApplication
- | AWSElasticBeanstalkApplicationVersion
- | AWSElasticBeanstalkEnvironment
- | AWSElasticLoadBalancingLoadBalancer
- | AWSIAMGroup
- | AWSIAMPolicy
- | AWSIAMRole
- | AWSIAMUser
- | AWSLambdaFunction
- | AWSRDSDBInstance
- | AWSRDSDBSecurityGroup
- | AWSRDSDBSnapshot
- | AWSRDSDBSubnetGroup
- | AWSRDSEventSubscription
- | AWSRedshiftCluster
- | AWSRedshiftClusterParameterGroup
- | AWSRedshiftClusterSecurityGroup
- | AWSRedshiftClusterSnapshot
- | AWSRedshiftClusterSubnetGroup
- | AWSRedshiftEventSubscription
- | AWSS3Bucket
- | AWSSsmManagedInstanceInventory
- | AWSWAFRegionalRateBasedRule
- | AWSWAFRegionalRule
- | AWSWAFRegionalRuleGroup
- | AWSWAFRegionalWebACL
- | AWSWafRateBasedRule
- | AWSWafRule
- | AWSWafRuleGroup
- | AWSWafWebACL
- data AccountAggregationSource
- accountAggregationSource :: NonEmpty Text -> AccountAggregationSource
- aasAWSRegions :: Lens' AccountAggregationSource (Maybe (NonEmpty Text))
- aasAllAWSRegions :: Lens' AccountAggregationSource (Maybe Bool)
- aasAccountIds :: Lens' AccountAggregationSource (NonEmpty Text)
- data AggregateComplianceByConfigRule
- aggregateComplianceByConfigRule :: AggregateComplianceByConfigRule
- acbcrCompliance :: Lens' AggregateComplianceByConfigRule (Maybe Compliance)
- acbcrConfigRuleName :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- acbcrAccountId :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- acbcrAWSRegion :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- data AggregateComplianceCount
- aggregateComplianceCount :: AggregateComplianceCount
- accGroupName :: Lens' AggregateComplianceCount (Maybe Text)
- accComplianceSummary :: Lens' AggregateComplianceCount (Maybe ComplianceSummary)
- data AggregateEvaluationResult
- aggregateEvaluationResult :: AggregateEvaluationResult
- aerEvaluationResultIdentifier :: Lens' AggregateEvaluationResult (Maybe EvaluationResultIdentifier)
- aerAnnotation :: Lens' AggregateEvaluationResult (Maybe Text)
- aerConfigRuleInvokedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime)
- aerResultRecordedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime)
- aerAccountId :: Lens' AggregateEvaluationResult (Maybe Text)
- aerComplianceType :: Lens' AggregateEvaluationResult (Maybe ComplianceType)
- aerAWSRegion :: Lens' AggregateEvaluationResult (Maybe Text)
- data AggregatedSourceStatus
- aggregatedSourceStatus :: AggregatedSourceStatus
- assLastErrorCode :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastUpdateStatus :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceStatusType)
- assSourceType :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceType)
- assSourceId :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastErrorMessage :: Lens' AggregatedSourceStatus (Maybe Text)
- assAWSRegion :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastUpdateTime :: Lens' AggregatedSourceStatus (Maybe UTCTime)
- data AggregationAuthorization
- aggregationAuthorization :: AggregationAuthorization
- aaCreationTime :: Lens' AggregationAuthorization (Maybe UTCTime)
- aaAuthorizedAWSRegion :: Lens' AggregationAuthorization (Maybe Text)
- aaAggregationAuthorizationARN :: Lens' AggregationAuthorization (Maybe Text)
- aaAuthorizedAccountId :: Lens' AggregationAuthorization (Maybe Text)
- data BaseConfigurationItem
- baseConfigurationItem :: BaseConfigurationItem
- bciResourceId :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceType :: Lens' BaseConfigurationItem (Maybe ResourceType)
- bciConfigurationStateId :: Lens' BaseConfigurationItem (Maybe Text)
- bciArn :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceName :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceCreationTime :: Lens' BaseConfigurationItem (Maybe UTCTime)
- bciConfigurationItemStatus :: Lens' BaseConfigurationItem (Maybe ConfigurationItemStatus)
- bciConfigurationItemCaptureTime :: Lens' BaseConfigurationItem (Maybe UTCTime)
- bciAccountId :: Lens' BaseConfigurationItem (Maybe Text)
- bciSupplementaryConfiguration :: Lens' BaseConfigurationItem (HashMap Text Text)
- bciAvailabilityZone :: Lens' BaseConfigurationItem (Maybe Text)
- bciVersion :: Lens' BaseConfigurationItem (Maybe Text)
- bciAwsRegion :: Lens' BaseConfigurationItem (Maybe Text)
- bciConfiguration :: Lens' BaseConfigurationItem (Maybe Text)
- data Compliance
- compliance :: Compliance
- cComplianceContributorCount :: Lens' Compliance (Maybe ComplianceContributorCount)
- cComplianceType :: Lens' Compliance (Maybe ComplianceType)
- data ComplianceByConfigRule
- complianceByConfigRule :: ComplianceByConfigRule
- cbcrCompliance :: Lens' ComplianceByConfigRule (Maybe Compliance)
- cbcrConfigRuleName :: Lens' ComplianceByConfigRule (Maybe Text)
- data ComplianceByResource
- complianceByResource :: ComplianceByResource
- cbrResourceId :: Lens' ComplianceByResource (Maybe Text)
- cbrResourceType :: Lens' ComplianceByResource (Maybe Text)
- cbrCompliance :: Lens' ComplianceByResource (Maybe Compliance)
- data ComplianceContributorCount
- complianceContributorCount :: ComplianceContributorCount
- cccCappedCount :: Lens' ComplianceContributorCount (Maybe Int)
- cccCapExceeded :: Lens' ComplianceContributorCount (Maybe Bool)
- data ComplianceSummary
- complianceSummary :: ComplianceSummary
- csComplianceSummaryTimestamp :: Lens' ComplianceSummary (Maybe UTCTime)
- csCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount)
- csNonCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount)
- data ComplianceSummaryByResourceType
- complianceSummaryByResourceType :: ComplianceSummaryByResourceType
- csbrtResourceType :: Lens' ComplianceSummaryByResourceType (Maybe Text)
- csbrtComplianceSummary :: Lens' ComplianceSummaryByResourceType (Maybe ComplianceSummary)
- data ConfigExportDeliveryInfo
- configExportDeliveryInfo :: ConfigExportDeliveryInfo
- cediLastErrorCode :: Lens' ConfigExportDeliveryInfo (Maybe Text)
- cediLastAttemptTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- cediLastSuccessfulTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- cediLastStatus :: Lens' ConfigExportDeliveryInfo (Maybe DeliveryStatus)
- cediLastErrorMessage :: Lens' ConfigExportDeliveryInfo (Maybe Text)
- cediNextDeliveryTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- data ConfigRule
- configRule :: Source -> ConfigRule
- crInputParameters :: Lens' ConfigRule (Maybe Text)
- crConfigRuleName :: Lens' ConfigRule (Maybe Text)
- crMaximumExecutionFrequency :: Lens' ConfigRule (Maybe MaximumExecutionFrequency)
- crConfigRuleId :: Lens' ConfigRule (Maybe Text)
- crScope :: Lens' ConfigRule (Maybe Scope)
- crConfigRuleState :: Lens' ConfigRule (Maybe ConfigRuleState)
- crDescription :: Lens' ConfigRule (Maybe Text)
- crConfigRuleARN :: Lens' ConfigRule (Maybe Text)
- crSource :: Lens' ConfigRule Source
- data ConfigRuleComplianceFilters
- configRuleComplianceFilters :: ConfigRuleComplianceFilters
- crcfConfigRuleName :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- crcfAccountId :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- crcfComplianceType :: Lens' ConfigRuleComplianceFilters (Maybe ComplianceType)
- crcfAWSRegion :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- data ConfigRuleComplianceSummaryFilters
- configRuleComplianceSummaryFilters :: ConfigRuleComplianceSummaryFilters
- crcsfAccountId :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text)
- crcsfAWSRegion :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text)
- data ConfigRuleEvaluationStatus
- configRuleEvaluationStatus :: ConfigRuleEvaluationStatus
- cresLastErrorCode :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastFailedEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresFirstActivatedTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresLastSuccessfulEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresConfigRuleName :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastErrorMessage :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresConfigRuleId :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastFailedInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresFirstEvaluationStarted :: Lens' ConfigRuleEvaluationStatus (Maybe Bool)
- cresLastSuccessfulInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresConfigRuleARN :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- data ConfigSnapshotDeliveryProperties
- configSnapshotDeliveryProperties :: ConfigSnapshotDeliveryProperties
- csdpDeliveryFrequency :: Lens' ConfigSnapshotDeliveryProperties (Maybe MaximumExecutionFrequency)
- data ConfigStreamDeliveryInfo
- configStreamDeliveryInfo :: ConfigStreamDeliveryInfo
- csdiLastErrorCode :: Lens' ConfigStreamDeliveryInfo (Maybe Text)
- csdiLastStatusChangeTime :: Lens' ConfigStreamDeliveryInfo (Maybe UTCTime)
- csdiLastStatus :: Lens' ConfigStreamDeliveryInfo (Maybe DeliveryStatus)
- csdiLastErrorMessage :: Lens' ConfigStreamDeliveryInfo (Maybe Text)
- data ConfigurationAggregator
- configurationAggregator :: ConfigurationAggregator
- caConfigurationAggregatorARN :: Lens' ConfigurationAggregator (Maybe Text)
- caCreationTime :: Lens' ConfigurationAggregator (Maybe UTCTime)
- caOrganizationAggregationSource :: Lens' ConfigurationAggregator (Maybe OrganizationAggregationSource)
- caLastUpdatedTime :: Lens' ConfigurationAggregator (Maybe UTCTime)
- caAccountAggregationSources :: Lens' ConfigurationAggregator [AccountAggregationSource]
- caConfigurationAggregatorName :: Lens' ConfigurationAggregator (Maybe Text)
- data ConfigurationItem
- configurationItem :: ConfigurationItem
- ciResourceId :: Lens' ConfigurationItem (Maybe Text)
- ciResourceType :: Lens' ConfigurationItem (Maybe ResourceType)
- ciConfigurationStateId :: Lens' ConfigurationItem (Maybe Text)
- ciArn :: Lens' ConfigurationItem (Maybe Text)
- ciResourceName :: Lens' ConfigurationItem (Maybe Text)
- ciResourceCreationTime :: Lens' ConfigurationItem (Maybe UTCTime)
- ciConfigurationItemStatus :: Lens' ConfigurationItem (Maybe ConfigurationItemStatus)
- ciConfigurationItemCaptureTime :: Lens' ConfigurationItem (Maybe UTCTime)
- ciAccountId :: Lens' ConfigurationItem (Maybe Text)
- ciSupplementaryConfiguration :: Lens' ConfigurationItem (HashMap Text Text)
- ciAvailabilityZone :: Lens' ConfigurationItem (Maybe Text)
- ciRelationships :: Lens' ConfigurationItem [Relationship]
- ciVersion :: Lens' ConfigurationItem (Maybe Text)
- ciAwsRegion :: Lens' ConfigurationItem (Maybe Text)
- ciRelatedEvents :: Lens' ConfigurationItem [Text]
- ciConfiguration :: Lens' ConfigurationItem (Maybe Text)
- ciConfigurationItemMD5Hash :: Lens' ConfigurationItem (Maybe Text)
- ciTags :: Lens' ConfigurationItem (HashMap Text Text)
- data ConfigurationRecorder
- configurationRecorder :: ConfigurationRecorder
- crName :: Lens' ConfigurationRecorder (Maybe Text)
- crRecordingGroup :: Lens' ConfigurationRecorder (Maybe RecordingGroup)
- crRoleARN :: Lens' ConfigurationRecorder (Maybe Text)
- data ConfigurationRecorderStatus
- configurationRecorderStatus :: ConfigurationRecorderStatus
- crsLastErrorCode :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsLastStopTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- crsLastStatusChangeTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- crsRecording :: Lens' ConfigurationRecorderStatus (Maybe Bool)
- crsLastStatus :: Lens' ConfigurationRecorderStatus (Maybe RecorderStatus)
- crsLastErrorMessage :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsName :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsLastStartTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- data DeliveryChannel
- deliveryChannel :: DeliveryChannel
- dcS3KeyPrefix :: Lens' DeliveryChannel (Maybe Text)
- dcSnsTopicARN :: Lens' DeliveryChannel (Maybe Text)
- dcName :: Lens' DeliveryChannel (Maybe Text)
- dcConfigSnapshotDeliveryProperties :: Lens' DeliveryChannel (Maybe ConfigSnapshotDeliveryProperties)
- dcS3BucketName :: Lens' DeliveryChannel (Maybe Text)
- data DeliveryChannelStatus
- deliveryChannelStatus :: DeliveryChannelStatus
- dcsConfigSnapshotDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo)
- dcsConfigStreamDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigStreamDeliveryInfo)
- dcsConfigHistoryDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo)
- dcsName :: Lens' DeliveryChannelStatus (Maybe Text)
- data Evaluation
- evaluation :: Text -> Text -> ComplianceType -> UTCTime -> Evaluation
- eAnnotation :: Lens' Evaluation (Maybe Text)
- eComplianceResourceType :: Lens' Evaluation Text
- eComplianceResourceId :: Lens' Evaluation Text
- eComplianceType :: Lens' Evaluation ComplianceType
- eOrderingTimestamp :: Lens' Evaluation UTCTime
- data EvaluationResult
- evaluationResult :: EvaluationResult
- erEvaluationResultIdentifier :: Lens' EvaluationResult (Maybe EvaluationResultIdentifier)
- erAnnotation :: Lens' EvaluationResult (Maybe Text)
- erConfigRuleInvokedTime :: Lens' EvaluationResult (Maybe UTCTime)
- erResultRecordedTime :: Lens' EvaluationResult (Maybe UTCTime)
- erResultToken :: Lens' EvaluationResult (Maybe Text)
- erComplianceType :: Lens' EvaluationResult (Maybe ComplianceType)
- data EvaluationResultIdentifier
- evaluationResultIdentifier :: EvaluationResultIdentifier
- eriEvaluationResultQualifier :: Lens' EvaluationResultIdentifier (Maybe EvaluationResultQualifier)
- eriOrderingTimestamp :: Lens' EvaluationResultIdentifier (Maybe UTCTime)
- data EvaluationResultQualifier
- evaluationResultQualifier :: EvaluationResultQualifier
- erqResourceId :: Lens' EvaluationResultQualifier (Maybe Text)
- erqResourceType :: Lens' EvaluationResultQualifier (Maybe Text)
- erqConfigRuleName :: Lens' EvaluationResultQualifier (Maybe Text)
- data OrganizationAggregationSource
- organizationAggregationSource :: Text -> OrganizationAggregationSource
- oasAWSRegions :: Lens' OrganizationAggregationSource (Maybe (NonEmpty Text))
- oasAllAWSRegions :: Lens' OrganizationAggregationSource (Maybe Bool)
- oasRoleARN :: Lens' OrganizationAggregationSource Text
- data PendingAggregationRequest
- pendingAggregationRequest :: PendingAggregationRequest
- parRequesterAccountId :: Lens' PendingAggregationRequest (Maybe Text)
- parRequesterAWSRegion :: Lens' PendingAggregationRequest (Maybe Text)
- data RecordingGroup
- recordingGroup :: RecordingGroup
- rgAllSupported :: Lens' RecordingGroup (Maybe Bool)
- rgIncludeGlobalResourceTypes :: Lens' RecordingGroup (Maybe Bool)
- rgResourceTypes :: Lens' RecordingGroup [ResourceType]
- data Relationship
- relationship :: Relationship
- rResourceId :: Lens' Relationship (Maybe Text)
- rResourceType :: Lens' Relationship (Maybe ResourceType)
- rResourceName :: Lens' Relationship (Maybe Text)
- rRelationshipName :: Lens' Relationship (Maybe Text)
- data ResourceCount
- resourceCount :: ResourceCount
- rcResourceType :: Lens' ResourceCount (Maybe ResourceType)
- rcCount :: Lens' ResourceCount (Maybe Integer)
- data ResourceIdentifier
- resourceIdentifier :: ResourceIdentifier
- riResourceId :: Lens' ResourceIdentifier (Maybe Text)
- riResourceType :: Lens' ResourceIdentifier (Maybe ResourceType)
- riResourceName :: Lens' ResourceIdentifier (Maybe Text)
- riResourceDeletionTime :: Lens' ResourceIdentifier (Maybe UTCTime)
- data ResourceKey
- resourceKey :: ResourceType -> Text -> ResourceKey
- rkResourceType :: Lens' ResourceKey ResourceType
- rkResourceId :: Lens' ResourceKey Text
- data Scope
- scope :: Scope
- sComplianceResourceTypes :: Lens' Scope [Text]
- sComplianceResourceId :: Lens' Scope (Maybe Text)
- sTagValue :: Lens' Scope (Maybe Text)
- sTagKey :: Lens' Scope (Maybe Text)
- data Source
- source :: Owner -> Text -> Source
- sSourceDetails :: Lens' Source [SourceDetail]
- sOwner :: Lens' Source Owner
- sSourceIdentifier :: Lens' Source Text
- data SourceDetail
- sourceDetail :: SourceDetail
- sdMessageType :: Lens' SourceDetail (Maybe MessageType)
- sdMaximumExecutionFrequency :: Lens' SourceDetail (Maybe MaximumExecutionFrequency)
- sdEventSource :: Lens' SourceDetail (Maybe EventSource)
Service Configuration
Errors
_InvalidTimeRangeException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified time range is not valid. The earlier time is not chronologically before the later time.
_InvalidSNSTopicARNException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon SNS topic does not exist.
_InvalidRecordingGroupException :: AsError a => Getting (First ServiceError) a ServiceError Source #
AWS Config throws an exception if the recording group does not contain a valid list of resource types. Invalid values might also be incorrectly formatted.
_NoAvailableOrganizationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Organization does is no longer available.
_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The requested action is not valid.
_OrganizationAccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
No permission to call the EnableAWSServiceAccess API.
_NoSuchConfigurationAggregatorException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a configuration aggregator that does not exist.
_InvalidRoleException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have provided a null or empty role ARN.
_LastDeliveryChannelDeleteFailedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You cannot delete the delivery channel you specified because the configuration recorder is running.
_InvalidLimitException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified limit is outside the allowable range.
_InvalidDeliveryChannelNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified delivery channel name is not valid.
_InvalidParameterValueException :: AsError a => Getting (First ServiceError) a ServiceError Source #
One or more of the specified parameters are invalid. Verify that your parameters are valid and try again.
_InvalidResultTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified ResultToken is invalid.
_NoSuchDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a delivery channel that does not exist.
_NoSuchConfigRuleException :: AsError a => Getting (First ServiceError) a ServiceError Source #
One or more AWS Config rules in the request are invalid. Verify that the rule names are correct and try again.
_OrganizationAllFeaturesNotEnabledException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The configuration aggregator cannot be created because organization does not have all features enabled.
_InsufficientPermissionsException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates one of the following errors:
- The rule cannot be created because the IAM role assigned to AWS Config lacks permissions to perform the config:Put* action.
- The AWS Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
_ResourceNotDiscoveredException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a resource that is either unknown or has not been discovered.
_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified next token is invalid. Specify the nextToken string that was returned in the previous response to get the next page of results.
_MaxNumberOfConfigRulesExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Failed to add the AWS Config rule because the account already contains the maximum number of 50 rules. Consider deleting any deactivated rules before you add new rules.
_NoAvailableConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There are no configuration recorders available to provide the role needed to describe your resources. Create a configuration recorder.
_NoSuchBucketException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon S3 bucket does not exist.
_NoAvailableDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There is no delivery channel available to record configurations.
_InvalidConfigurationRecorderNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have provided a configuration recorder name that is not valid.
_NoRunningConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There is no configuration recorder running.
_MaxNumberOfConfigurationRecordersExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have reached the limit of the number of recorders you can create.
_InsufficientDeliveryPolicyException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Your Amazon S3 bucket policy does not permit AWS Config to write to it.
_MaxNumberOfDeliveryChannelsExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have reached the limit of the number of delivery channels you can create.
_NoSuchConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a configuration recorder that does not exist.
_InvalidS3KeyPrefixException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon S3 key prefix is not valid.
_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown if an evaluation is in progress or if you call the StartConfigRulesEvaluation API more than once per minute.
_ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The rule is currently being deleted or the rule is deleting your evaluation results. Try your request again later.
AggregatedSourceStatusType
data AggregatedSourceStatusType Source #
Instances
AggregatedSourceType
data AggregatedSourceType Source #
Constructors
| Account | |
| Organization |
Instances
ChronologicalOrder
data ChronologicalOrder Source #
Instances
ComplianceType
data ComplianceType Source #
Constructors
| Compliant | |
| InsufficientData | |
| NonCompliant | |
| NotApplicable |
Instances
ConfigRuleComplianceSummaryGroupKey
data ConfigRuleComplianceSummaryGroupKey Source #
Instances
ConfigRuleState
data ConfigRuleState Source #
Constructors
| Active | |
| Deleting | |
| DeletingResults | |
| Evaluating |
Instances
ConfigurationItemStatus
data ConfigurationItemStatus Source #
Instances
DeliveryStatus
data DeliveryStatus Source #
Constructors
| DSFailure | |
| DSNotApplicable | |
| DSSuccess |
Instances
EventSource
data EventSource Source #
Constructors
| AWS_Config |
Instances
MaximumExecutionFrequency
data MaximumExecutionFrequency Source #
Constructors
| OneHour | |
| SixHours | |
| ThreeHours | |
| TwelveHours | |
| TwentyFourHours |
Instances
MessageType
data MessageType Source #
Constructors
| ConfigurationItemChangeNotification | |
| ConfigurationSnapshotDeliveryCompleted | |
| OversizedConfigurationItemChangeNotification | |
| ScheduledNotification |
Instances
Owner
Constructors
| AWS | |
| CustomLambda |
Instances
RecorderStatus
data RecorderStatus Source #
Instances
ResourceType
data ResourceType Source #
Constructors
Instances
AccountAggregationSource
data AccountAggregationSource Source #
A collection of accounts and regions.
See: accountAggregationSource smart constructor.
Instances
accountAggregationSource Source #
Arguments
| :: NonEmpty Text | |
| -> AccountAggregationSource |
Creates a value of AccountAggregationSource with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aasAWSRegions- The source regions being aggregated.aasAllAWSRegions- If true, aggreagate existing AWS Config regions and future regions.aasAccountIds- The 12-digit account ID of the account being aggregated.
aasAWSRegions :: Lens' AccountAggregationSource (Maybe (NonEmpty Text)) Source #
The source regions being aggregated.
aasAllAWSRegions :: Lens' AccountAggregationSource (Maybe Bool) Source #
If true, aggreagate existing AWS Config regions and future regions.
aasAccountIds :: Lens' AccountAggregationSource (NonEmpty Text) Source #
The 12-digit account ID of the account being aggregated.
AggregateComplianceByConfigRule
data AggregateComplianceByConfigRule Source #
Indicates whether an AWS Config rule is compliant based on account ID, region, compliance, and rule name.
A rule is compliant if all of the resources that the rule evaluated comply with it. It is noncompliant if any of these resources do not comply.
See: aggregateComplianceByConfigRule smart constructor.
Instances
aggregateComplianceByConfigRule :: AggregateComplianceByConfigRule Source #
Creates a value of AggregateComplianceByConfigRule with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
acbcrCompliance- Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.acbcrConfigRuleName- The name of the AWS Config rule.acbcrAccountId- The 12-digit account ID of the source account.acbcrAWSRegion- The source region from where the data is aggregated.
acbcrCompliance :: Lens' AggregateComplianceByConfigRule (Maybe Compliance) Source #
Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.
acbcrConfigRuleName :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The name of the AWS Config rule.
acbcrAccountId :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The 12-digit account ID of the source account.
acbcrAWSRegion :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The source region from where the data is aggregated.
AggregateComplianceCount
data AggregateComplianceCount Source #
Returns the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator.
See: aggregateComplianceCount smart constructor.
Instances
aggregateComplianceCount :: AggregateComplianceCount Source #
Creates a value of AggregateComplianceCount with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
accGroupName- The 12-digit account ID or region based on the GroupByKey value.accComplianceSummary- The number of compliant and noncompliant AWS Config rules.
accGroupName :: Lens' AggregateComplianceCount (Maybe Text) Source #
The 12-digit account ID or region based on the GroupByKey value.
accComplianceSummary :: Lens' AggregateComplianceCount (Maybe ComplianceSummary) Source #
The number of compliant and noncompliant AWS Config rules.
AggregateEvaluationResult
data AggregateEvaluationResult Source #
The details of an AWS Config evaluation for an account ID and region in an aggregator. Provides the AWS resource that was evaluated, the compliance of the resource, related time stamps, and supplementary information.
See: aggregateEvaluationResult smart constructor.
Instances
aggregateEvaluationResult :: AggregateEvaluationResult Source #
Creates a value of AggregateEvaluationResult with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aerEvaluationResultIdentifier- Uniquely identifies the evaluation result.aerAnnotation- Supplementary information about how the agrregate evaluation determined the compliance.aerConfigRuleInvokedTime- The time when the AWS Config rule evaluated the AWS resource.aerResultRecordedTime- The time when AWS Config recorded the aggregate evaluation result.aerAccountId- The 12-digit account ID of the source account.aerComplianceType- The resource compliance status. For theAggregationEvaluationResultdata type, AWS Config supports only theCOMPLIANTandNON_COMPLIANT. AWS Config does not support theNOT_APPLICABLEandINSUFFICIENT_DATAvalue.aerAWSRegion- The source region from where the data is aggregated.
aerEvaluationResultIdentifier :: Lens' AggregateEvaluationResult (Maybe EvaluationResultIdentifier) Source #
Uniquely identifies the evaluation result.
aerAnnotation :: Lens' AggregateEvaluationResult (Maybe Text) Source #
Supplementary information about how the agrregate evaluation determined the compliance.
aerConfigRuleInvokedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime) Source #
The time when the AWS Config rule evaluated the AWS resource.
aerResultRecordedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime) Source #
The time when AWS Config recorded the aggregate evaluation result.
aerAccountId :: Lens' AggregateEvaluationResult (Maybe Text) Source #
The 12-digit account ID of the source account.
aerComplianceType :: Lens' AggregateEvaluationResult (Maybe ComplianceType) Source #
The resource compliance status. For the AggregationEvaluationResult data type, AWS Config supports only the COMPLIANT and NON_COMPLIANT . AWS Config does not support the NOT_APPLICABLE and INSUFFICIENT_DATA value.
aerAWSRegion :: Lens' AggregateEvaluationResult (Maybe Text) Source #
The source region from where the data is aggregated.
AggregatedSourceStatus
data AggregatedSourceStatus Source #
The current sync status between the source and the aggregator account.
See: aggregatedSourceStatus smart constructor.
Instances
aggregatedSourceStatus :: AggregatedSourceStatus Source #
Creates a value of AggregatedSourceStatus with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
assLastErrorCode- The error code that AWS Config returned when the source account aggregation last failed.assLastUpdateStatus- Filters the last updated status type. * Valid value FAILED indicates errors while moving data. * Valid value SUCCEEDED indicates the data was successfully moved. * Valid value OUTDATED indicates the data is not the most recent.assSourceType- The source account or an organization.assSourceId- The source account ID or an organization.assLastErrorMessage- The message indicating that the source account aggregation failed due to an error.assAWSRegion- The region authorized to collect aggregated data.assLastUpdateTime- The time of the last update.
assLastErrorCode :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The error code that AWS Config returned when the source account aggregation last failed.
assLastUpdateStatus :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceStatusType) Source #
Filters the last updated status type. * Valid value FAILED indicates errors while moving data. * Valid value SUCCEEDED indicates the data was successfully moved. * Valid value OUTDATED indicates the data is not the most recent.
assSourceType :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceType) Source #
The source account or an organization.
assSourceId :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The source account ID or an organization.
assLastErrorMessage :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The message indicating that the source account aggregation failed due to an error.
assAWSRegion :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The region authorized to collect aggregated data.
assLastUpdateTime :: Lens' AggregatedSourceStatus (Maybe UTCTime) Source #
The time of the last update.
AggregationAuthorization
data AggregationAuthorization Source #
An object that represents the authorizations granted to aggregator accounts and regions.
See: aggregationAuthorization smart constructor.
Instances
aggregationAuthorization :: AggregationAuthorization Source #
Creates a value of AggregationAuthorization with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aaCreationTime- The time stamp when the aggregation authorization was created.aaAuthorizedAWSRegion- The region authorized to collect aggregated data.aaAggregationAuthorizationARN- The Amazon Resource Name (ARN) of the aggregation object.aaAuthorizedAccountId- The 12-digit account ID of the account authorized to aggregate data.
aaCreationTime :: Lens' AggregationAuthorization (Maybe UTCTime) Source #
The time stamp when the aggregation authorization was created.
aaAuthorizedAWSRegion :: Lens' AggregationAuthorization (Maybe Text) Source #
The region authorized to collect aggregated data.
aaAggregationAuthorizationARN :: Lens' AggregationAuthorization (Maybe Text) Source #
The Amazon Resource Name (ARN) of the aggregation object.
aaAuthorizedAccountId :: Lens' AggregationAuthorization (Maybe Text) Source #
The 12-digit account ID of the account authorized to aggregate data.
BaseConfigurationItem
data BaseConfigurationItem Source #
The detailed configuration of a specified resource.
See: baseConfigurationItem smart constructor.
Instances
baseConfigurationItem :: BaseConfigurationItem Source #
Creates a value of BaseConfigurationItem with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
bciResourceId- The ID of the resource (for example., sg-xxxxxx).bciResourceType- The type of AWS resource.bciConfigurationStateId- An identifier that indicates the ordering of the configuration items of a resource.bciArn- The Amazon Resource Name (ARN) of the resource.bciResourceName- The custom name of the resource, if available.bciResourceCreationTime- The time stamp when the resource was created.bciConfigurationItemStatus- The configuration item status.bciConfigurationItemCaptureTime- The time when the configuration recording was initiated.bciAccountId- The 12 digit AWS account ID associated with the resource.bciSupplementaryConfiguration- Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.bciAvailabilityZone- The Availability Zone associated with the resource.bciVersion- The version number of the resource configuration.bciAwsRegion- The region where the resource resides.bciConfiguration- The description of the resource configuration.
bciResourceId :: Lens' BaseConfigurationItem (Maybe Text) Source #
The ID of the resource (for example., sg-xxxxxx).
bciResourceType :: Lens' BaseConfigurationItem (Maybe ResourceType) Source #
The type of AWS resource.
bciConfigurationStateId :: Lens' BaseConfigurationItem (Maybe Text) Source #
An identifier that indicates the ordering of the configuration items of a resource.
bciArn :: Lens' BaseConfigurationItem (Maybe Text) Source #
The Amazon Resource Name (ARN) of the resource.
bciResourceName :: Lens' BaseConfigurationItem (Maybe Text) Source #
The custom name of the resource, if available.
bciResourceCreationTime :: Lens' BaseConfigurationItem (Maybe UTCTime) Source #
The time stamp when the resource was created.
bciConfigurationItemStatus :: Lens' BaseConfigurationItem (Maybe ConfigurationItemStatus) Source #
The configuration item status.
bciConfigurationItemCaptureTime :: Lens' BaseConfigurationItem (Maybe UTCTime) Source #
The time when the configuration recording was initiated.
bciAccountId :: Lens' BaseConfigurationItem (Maybe Text) Source #
The 12 digit AWS account ID associated with the resource.
bciSupplementaryConfiguration :: Lens' BaseConfigurationItem (HashMap Text Text) Source #
Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.
bciAvailabilityZone :: Lens' BaseConfigurationItem (Maybe Text) Source #
The Availability Zone associated with the resource.
bciVersion :: Lens' BaseConfigurationItem (Maybe Text) Source #
The version number of the resource configuration.
bciAwsRegion :: Lens' BaseConfigurationItem (Maybe Text) Source #
The region where the resource resides.
bciConfiguration :: Lens' BaseConfigurationItem (Maybe Text) Source #
The description of the resource configuration.
Compliance
data Compliance Source #
Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.
See: compliance smart constructor.
Instances
compliance :: Compliance Source #
Creates a value of Compliance with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cComplianceContributorCount- The number of AWS resources or AWS Config rules that cause a result ofNON_COMPLIANT, up to a maximum number.cComplianceType- Indicates whether an AWS resource or AWS Config rule is compliant. A resource is compliant if it complies with all of the AWS Config rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules. A rule is compliant if all of the resources that the rule evaluates comply with it. A rule is noncompliant if any of these resources do not comply. AWS Config returns theINSUFFICIENT_DATAvalue when no evaluation results are available for the AWS resource or AWS Config rule. For theCompliancedata type, AWS Config supports onlyCOMPLIANT,NON_COMPLIANT, andINSUFFICIENT_DATAvalues. AWS Config does not support theNOT_APPLICABLEvalue for theCompliancedata type.
cComplianceContributorCount :: Lens' Compliance (Maybe ComplianceContributorCount) Source #
The number of AWS resources or AWS Config rules that cause a result of NON_COMPLIANT , up to a maximum number.
cComplianceType :: Lens' Compliance (Maybe ComplianceType) Source #
Indicates whether an AWS resource or AWS Config rule is compliant. A resource is compliant if it complies with all of the AWS Config rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules. A rule is compliant if all of the resources that the rule evaluates comply with it. A rule is noncompliant if any of these resources do not comply. AWS Config returns the INSUFFICIENT_DATA value when no evaluation results are available for the AWS resource or AWS Config rule. For the Compliance data type, AWS Config supports only COMPLIANT , NON_COMPLIANT , and INSUFFICIENT_DATA values. AWS Config does not support the NOT_APPLICABLE value for the Compliance data type.
ComplianceByConfigRule
data ComplianceByConfigRule Source #
Indicates whether an AWS Config rule is compliant. A rule is compliant if all of the resources that the rule evaluated comply with it. A rule is noncompliant if any of these resources do not comply.
See: complianceByConfigRule smart constructor.
Instances
complianceByConfigRule :: ComplianceByConfigRule Source #
Creates a value of ComplianceByConfigRule with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cbcrCompliance- Indicates whether the AWS Config rule is compliant.cbcrConfigRuleName- The name of the AWS Config rule.
cbcrCompliance :: Lens' ComplianceByConfigRule (Maybe Compliance) Source #
Indicates whether the AWS Config rule is compliant.
cbcrConfigRuleName :: Lens' ComplianceByConfigRule (Maybe Text) Source #
The name of the AWS Config rule.
ComplianceByResource
data ComplianceByResource Source #
Indicates whether an AWS resource that is evaluated according to one or more AWS Config rules is compliant. A resource is compliant if it complies with all of the rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules.
See: complianceByResource smart constructor.
Instances
complianceByResource :: ComplianceByResource Source #
Creates a value of ComplianceByResource with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cbrResourceId- The ID of the AWS resource that was evaluated.cbrResourceType- The type of the AWS resource that was evaluated.cbrCompliance- Indicates whether the AWS resource complies with all of the AWS Config rules that evaluated it.
cbrResourceId :: Lens' ComplianceByResource (Maybe Text) Source #
The ID of the AWS resource that was evaluated.
cbrResourceType :: Lens' ComplianceByResource (Maybe Text) Source #
The type of the AWS resource that was evaluated.
cbrCompliance :: Lens' ComplianceByResource (Maybe Compliance) Source #
Indicates whether the AWS resource complies with all of the AWS Config rules that evaluated it.
ComplianceContributorCount
data ComplianceContributorCount Source #
The number of AWS resources or AWS Config rules responsible for the current compliance of the item, up to a maximum number.
See: complianceContributorCount smart constructor.
Instances
complianceContributorCount :: ComplianceContributorCount Source #
Creates a value of ComplianceContributorCount with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cccCappedCount- The number of AWS resources or AWS Config rules responsible for the current compliance of the item.cccCapExceeded- Indicates whether the maximum count is reached.
cccCappedCount :: Lens' ComplianceContributorCount (Maybe Int) Source #
The number of AWS resources or AWS Config rules responsible for the current compliance of the item.
cccCapExceeded :: Lens' ComplianceContributorCount (Maybe Bool) Source #
Indicates whether the maximum count is reached.
ComplianceSummary
data ComplianceSummary Source #
The number of AWS Config rules or AWS resources that are compliant and noncompliant.
See: complianceSummary smart constructor.
Instances
complianceSummary :: ComplianceSummary Source #
Creates a value of ComplianceSummary with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csComplianceSummaryTimestamp- The time that AWS Config created the compliance summary.csCompliantResourceCount- The number of AWS Config rules or AWS resources that are compliant, up to a maximum of 25 for rules and 100 for resources.csNonCompliantResourceCount- The number of AWS Config rules or AWS resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.
csComplianceSummaryTimestamp :: Lens' ComplianceSummary (Maybe UTCTime) Source #
The time that AWS Config created the compliance summary.
csCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source #
The number of AWS Config rules or AWS resources that are compliant, up to a maximum of 25 for rules and 100 for resources.
csNonCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source #
The number of AWS Config rules or AWS resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.
ComplianceSummaryByResourceType
data ComplianceSummaryByResourceType Source #
The number of AWS resources of a specific type that are compliant or noncompliant, up to a maximum of 100 for each.
See: complianceSummaryByResourceType smart constructor.
Instances
complianceSummaryByResourceType :: ComplianceSummaryByResourceType Source #
Creates a value of ComplianceSummaryByResourceType with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csbrtResourceType- The type of AWS resource.csbrtComplianceSummary- The number of AWS resources that are compliant or noncompliant, up to a maximum of 100 for each.
csbrtResourceType :: Lens' ComplianceSummaryByResourceType (Maybe Text) Source #
The type of AWS resource.
csbrtComplianceSummary :: Lens' ComplianceSummaryByResourceType (Maybe ComplianceSummary) Source #
The number of AWS resources that are compliant or noncompliant, up to a maximum of 100 for each.
ConfigExportDeliveryInfo
data ConfigExportDeliveryInfo Source #
Provides status of the delivery of the snapshot or the configuration history to the specified Amazon S3 bucket. Also provides the status of notifications about the Amazon S3 delivery to the specified Amazon SNS topic.
See: configExportDeliveryInfo smart constructor.
Instances
configExportDeliveryInfo :: ConfigExportDeliveryInfo Source #
Creates a value of ConfigExportDeliveryInfo with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cediLastErrorCode- The error code from the last attempted delivery.cediLastAttemptTime- The time of the last attempted delivery.cediLastSuccessfulTime- The time of the last successful delivery.cediLastStatus- Status of the last attempted delivery.cediLastErrorMessage- The error message from the last attempted delivery.cediNextDeliveryTime- The time that the next delivery occurs.
cediLastErrorCode :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source #
The error code from the last attempted delivery.
cediLastAttemptTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time of the last attempted delivery.
cediLastSuccessfulTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time of the last successful delivery.
cediLastStatus :: Lens' ConfigExportDeliveryInfo (Maybe DeliveryStatus) Source #
Status of the last attempted delivery.
cediLastErrorMessage :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source #
The error message from the last attempted delivery.
cediNextDeliveryTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time that the next delivery occurs.
ConfigRule
data ConfigRule Source #
An AWS Config rule represents an AWS Lambda function that you create for a custom rule or a predefined function for an AWS managed rule. The function evaluates configuration items to assess whether your AWS resources comply with your desired configurations. This function can run when AWS Config detects a configuration change to an AWS resource and at a periodic frequency that you choose (for example, every 24 hours).
For more information about developing and using AWS Config rules, see Evaluating AWS Resource Configurations with AWS Config in the AWS Config Developer Guide .
See: configRule smart constructor.
Arguments
| :: Source | |
| -> ConfigRule |
Creates a value of ConfigRule with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crInputParameters- A string, in JSON format, that is passed to the AWS Config rule Lambda function.crConfigRuleName- The name that you assign to the AWS Config rule. The name is required if you are adding a new rule.crMaximumExecutionFrequency- The maximum frequency with which AWS Config runs evaluations for a rule. You can specify a value forMaximumExecutionFrequencywhen: * You are using an AWS managed rule that is triggered at a periodic frequency. * Your custom rule is triggered when AWS Config delivers the configuration snapshot. For more information, seeConfigSnapshotDeliveryProperties.crConfigRuleId- The ID of the AWS Config rule.crScope- Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.crConfigRuleState- Indicates whether the AWS Config rule is active or is currently being deleted by AWS Config. It can also indicate the evaluation status for the AWS Config rule. AWS Config sets the state of the rule toEVALUATINGtemporarily after you use theStartConfigRulesEvaluationrequest to evaluate your resources against the AWS Config rule. AWS Config sets the state of the rule toDELETING_RESULTStemporarily after you use theDeleteEvaluationResultsrequest to delete the current evaluation results for the AWS Config rule. AWS Config temporarily sets the state of a rule toDELETINGafter you use theDeleteConfigRulerequest to delete the rule. After AWS Config deletes the rule, the rule and all of its evaluations are erased and are no longer available.crDescription- The description that you provide for the AWS Config rule.crConfigRuleARN- The Amazon Resource Name (ARN) of the AWS Config rule.crSource- Provides the rule owner (AWS or customer), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
crInputParameters :: Lens' ConfigRule (Maybe Text) Source #
A string, in JSON format, that is passed to the AWS Config rule Lambda function.
crConfigRuleName :: Lens' ConfigRule (Maybe Text) Source #
The name that you assign to the AWS Config rule. The name is required if you are adding a new rule.
crMaximumExecutionFrequency :: Lens' ConfigRule (Maybe MaximumExecutionFrequency) Source #
The maximum frequency with which AWS Config runs evaluations for a rule. You can specify a value for MaximumExecutionFrequency when: * You are using an AWS managed rule that is triggered at a periodic frequency. * Your custom rule is triggered when AWS Config delivers the configuration snapshot. For more information, see ConfigSnapshotDeliveryProperties .
crConfigRuleId :: Lens' ConfigRule (Maybe Text) Source #
The ID of the AWS Config rule.
crScope :: Lens' ConfigRule (Maybe Scope) Source #
Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.
crConfigRuleState :: Lens' ConfigRule (Maybe ConfigRuleState) Source #
Indicates whether the AWS Config rule is active or is currently being deleted by AWS Config. It can also indicate the evaluation status for the AWS Config rule. AWS Config sets the state of the rule to EVALUATING temporarily after you use the StartConfigRulesEvaluation request to evaluate your resources against the AWS Config rule. AWS Config sets the state of the rule to DELETING_RESULTS temporarily after you use the DeleteEvaluationResults request to delete the current evaluation results for the AWS Config rule. AWS Config temporarily sets the state of a rule to DELETING after you use the DeleteConfigRule request to delete the rule. After AWS Config deletes the rule, the rule and all of its evaluations are erased and are no longer available.
crDescription :: Lens' ConfigRule (Maybe Text) Source #
The description that you provide for the AWS Config rule.
crConfigRuleARN :: Lens' ConfigRule (Maybe Text) Source #
The Amazon Resource Name (ARN) of the AWS Config rule.
crSource :: Lens' ConfigRule Source Source #
Provides the rule owner (AWS or customer), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
ConfigRuleComplianceFilters
data ConfigRuleComplianceFilters Source #
Filters the compliance results based on account ID, region, compliance type, and rule name.
See: configRuleComplianceFilters smart constructor.
Instances
configRuleComplianceFilters :: ConfigRuleComplianceFilters Source #
Creates a value of ConfigRuleComplianceFilters with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crcfConfigRuleName- The name of the AWS Config rule.crcfAccountId- The 12-digit account ID of the source account.crcfComplianceType- The rule compliance status. For theConfigRuleComplianceFiltersdata type, AWS Config supports onlyCOMPLIANTandNON_COMPLIANT. AWS Config does not support theNOT_APPLICABLEand theINSUFFICIENT_DATAvalues.crcfAWSRegion- The source region where the data is aggregated.
crcfConfigRuleName :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The name of the AWS Config rule.
crcfAccountId :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The 12-digit account ID of the source account.
crcfComplianceType :: Lens' ConfigRuleComplianceFilters (Maybe ComplianceType) Source #
The rule compliance status. For the ConfigRuleComplianceFilters data type, AWS Config supports only COMPLIANT and NON_COMPLIANT . AWS Config does not support the NOT_APPLICABLE and the INSUFFICIENT_DATA values.
crcfAWSRegion :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The source region where the data is aggregated.
ConfigRuleComplianceSummaryFilters
data ConfigRuleComplianceSummaryFilters Source #
Filters the results based on the account IDs and regions.
See: configRuleComplianceSummaryFilters smart constructor.
Instances
configRuleComplianceSummaryFilters :: ConfigRuleComplianceSummaryFilters Source #
Creates a value of ConfigRuleComplianceSummaryFilters with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crcsfAccountId- The 12-digit account ID of the source account.crcsfAWSRegion- The source region where the data is aggregated.
crcsfAccountId :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text) Source #
The 12-digit account ID of the source account.
crcsfAWSRegion :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text) Source #
The source region where the data is aggregated.
ConfigRuleEvaluationStatus
data ConfigRuleEvaluationStatus Source #
Status information for your AWS managed Config rules. The status includes information such as the last time the rule ran, the last time it failed, and the related error for the last failure.
This action does not return status information about custom AWS Config rules.
See: configRuleEvaluationStatus smart constructor.
Instances
configRuleEvaluationStatus :: ConfigRuleEvaluationStatus Source #
Creates a value of ConfigRuleEvaluationStatus with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cresLastErrorCode- The error code that AWS Config returned when the rule last failed.cresLastFailedEvaluationTime- The time that AWS Config last failed to evaluate your AWS resources against the rule.cresFirstActivatedTime- The time that you first activated the AWS Config rule.cresLastSuccessfulEvaluationTime- The time that AWS Config last successfully evaluated your AWS resources against the rule.cresConfigRuleName- The name of the AWS Config rule.cresLastErrorMessage- The error message that AWS Config returned when the rule last failed.cresConfigRuleId- The ID of the AWS Config rule.cresLastFailedInvocationTime- The time that AWS Config last failed to invoke the AWS Config rule to evaluate your AWS resources.cresFirstEvaluationStarted- Indicates whether AWS Config has evaluated your resources against the rule at least once. *true- AWS Config has evaluated your AWS resources against the rule at least once. *false- AWS Config has not once finished evaluating your AWS resources against the rule.cresLastSuccessfulInvocationTime- The time that AWS Config last successfully invoked the AWS Config rule to evaluate your AWS resources.cresConfigRuleARN- The Amazon Resource Name (ARN) of the AWS Config rule.
cresLastErrorCode :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The error code that AWS Config returned when the rule last failed.
cresLastFailedEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last failed to evaluate your AWS resources against the rule.
cresFirstActivatedTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that you first activated the AWS Config rule.
cresLastSuccessfulEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last successfully evaluated your AWS resources against the rule.
cresConfigRuleName :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The name of the AWS Config rule.
cresLastErrorMessage :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The error message that AWS Config returned when the rule last failed.
cresConfigRuleId :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The ID of the AWS Config rule.
cresLastFailedInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last failed to invoke the AWS Config rule to evaluate your AWS resources.
cresFirstEvaluationStarted :: Lens' ConfigRuleEvaluationStatus (Maybe Bool) Source #
Indicates whether AWS Config has evaluated your resources against the rule at least once. * true - AWS Config has evaluated your AWS resources against the rule at least once. * false - AWS Config has not once finished evaluating your AWS resources against the rule.
cresLastSuccessfulInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last successfully invoked the AWS Config rule to evaluate your AWS resources.
cresConfigRuleARN :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The Amazon Resource Name (ARN) of the AWS Config rule.
ConfigSnapshotDeliveryProperties
data ConfigSnapshotDeliveryProperties Source #
Provides options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket in your delivery channel.
The frequency for a rule that triggers evaluations for your resources when AWS Config delivers the configuration snapshot is set by one of two values, depending on which is less frequent:
- The value for the
deliveryFrequencyparameter within the delivery channel configuration, which sets how often AWS Config delivers configuration snapshots. This value also sets how often AWS Config invokes evaluations for AWS Config rules. - The value for the
MaximumExecutionFrequencyparameter, which sets the maximum frequency with which AWS Config invokes evaluations for the rule. For more information, seeConfigRule.
If the deliveryFrequency value is less frequent than the MaximumExecutionFrequency value for a rule, AWS Config invokes the rule only as often as the deliveryFrequency value.
- For example, you want your rule to run evaluations when AWS Config delivers the configuration snapshot.
- You specify the
MaximumExecutionFrequencyvalue forSix_Hours. - You then specify the delivery channel
deliveryFrequencyvalue forTwentyFour_Hours. - Because the value for
deliveryFrequencyis less frequent thanMaximumExecutionFrequency, AWS Config invokes evaluations for the rule every 24 hours.
You should set the MaximumExecutionFrequency value to be at least as frequent as the deliveryFrequency value. You can view the deliveryFrequency value by using the DescribeDeliveryChannnels action.
To update the deliveryFrequency with which AWS Config delivers your configuration snapshots, use the PutDeliveryChannel action.
See: configSnapshotDeliveryProperties smart constructor.
Instances
configSnapshotDeliveryProperties :: ConfigSnapshotDeliveryProperties Source #
Creates a value of ConfigSnapshotDeliveryProperties with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csdpDeliveryFrequency- The frequency with which AWS Config delivers configuration snapshots.
csdpDeliveryFrequency :: Lens' ConfigSnapshotDeliveryProperties (Maybe MaximumExecutionFrequency) Source #
The frequency with which AWS Config delivers configuration snapshots.
ConfigStreamDeliveryInfo
data ConfigStreamDeliveryInfo Source #
A list that contains the status of the delivery of the configuration stream notification to the Amazon SNS topic.
See: configStreamDeliveryInfo smart constructor.
Instances
configStreamDeliveryInfo :: ConfigStreamDeliveryInfo Source #
Creates a value of ConfigStreamDeliveryInfo with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csdiLastErrorCode- The error code from the last attempted delivery.csdiLastStatusChangeTime- The time from the last status change.csdiLastStatus- Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for AWS Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable .csdiLastErrorMessage- The error message from the last attempted delivery.
csdiLastErrorCode :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source #
The error code from the last attempted delivery.
csdiLastStatusChangeTime :: Lens' ConfigStreamDeliveryInfo (Maybe UTCTime) Source #
The time from the last status change.
csdiLastStatus :: Lens' ConfigStreamDeliveryInfo (Maybe DeliveryStatus) Source #
Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for AWS Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable .
csdiLastErrorMessage :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source #
The error message from the last attempted delivery.
ConfigurationAggregator
data ConfigurationAggregator Source #
The details about the configuration aggregator, including information about source accounts, regions, and metadata of the aggregator.
See: configurationAggregator smart constructor.
Instances
configurationAggregator :: ConfigurationAggregator Source #
Creates a value of ConfigurationAggregator with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
caConfigurationAggregatorARN- The Amazon Resource Name (ARN) of the aggregator.caCreationTime- The time stamp when the configuration aggregator was created.caOrganizationAggregationSource- Provides an organization and list of regions to be aggregated.caLastUpdatedTime- The time of the last update.caAccountAggregationSources- Provides a list of source accounts and regions to be aggregated.caConfigurationAggregatorName- The name of the aggregator.
caConfigurationAggregatorARN :: Lens' ConfigurationAggregator (Maybe Text) Source #
The Amazon Resource Name (ARN) of the aggregator.
caCreationTime :: Lens' ConfigurationAggregator (Maybe UTCTime) Source #
The time stamp when the configuration aggregator was created.
caOrganizationAggregationSource :: Lens' ConfigurationAggregator (Maybe OrganizationAggregationSource) Source #
Provides an organization and list of regions to be aggregated.
caLastUpdatedTime :: Lens' ConfigurationAggregator (Maybe UTCTime) Source #
The time of the last update.
caAccountAggregationSources :: Lens' ConfigurationAggregator [AccountAggregationSource] Source #
Provides a list of source accounts and regions to be aggregated.
caConfigurationAggregatorName :: Lens' ConfigurationAggregator (Maybe Text) Source #
The name of the aggregator.
ConfigurationItem
data ConfigurationItem Source #
A list that contains detailed configurations of a specified resource.
See: configurationItem smart constructor.
Instances
configurationItem :: ConfigurationItem Source #
Creates a value of ConfigurationItem with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ciResourceId- The ID of the resource (for example,sg-xxxxxx).ciResourceType- The type of AWS resource.ciConfigurationStateId- An identifier that indicates the ordering of the configuration items of a resource.ciArn- The Amazon Resource Name (ARN) of the resource.ciResourceName- The custom name of the resource, if available.ciResourceCreationTime- The time stamp when the resource was created.ciConfigurationItemStatus- The configuration item status.ciConfigurationItemCaptureTime- The time when the configuration recording was initiated.ciAccountId- The 12-digit AWS account ID associated with the resource.ciSupplementaryConfiguration- Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for theconfigurationparameter.ciAvailabilityZone- The Availability Zone associated with the resource.ciRelationships- A list of related AWS resources.ciVersion- The version number of the resource configuration.ciAwsRegion- The region where the resource resides.ciRelatedEvents- A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is AWS CloudTrail . An empty field indicates that the current configuration was not initiated by any event.ciConfiguration- The description of the resource configuration.ciConfigurationItemMD5Hash- Unique MD5 hash that represents the configuration item's state. You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.ciTags- A mapping of key value tags associated with the resource.
ciResourceId :: Lens' ConfigurationItem (Maybe Text) Source #
The ID of the resource (for example, sg-xxxxxx ).
ciResourceType :: Lens' ConfigurationItem (Maybe ResourceType) Source #
The type of AWS resource.
ciConfigurationStateId :: Lens' ConfigurationItem (Maybe Text) Source #
An identifier that indicates the ordering of the configuration items of a resource.
ciArn :: Lens' ConfigurationItem (Maybe Text) Source #
The Amazon Resource Name (ARN) of the resource.
ciResourceName :: Lens' ConfigurationItem (Maybe Text) Source #
The custom name of the resource, if available.
ciResourceCreationTime :: Lens' ConfigurationItem (Maybe UTCTime) Source #
The time stamp when the resource was created.
ciConfigurationItemStatus :: Lens' ConfigurationItem (Maybe ConfigurationItemStatus) Source #
The configuration item status.
ciConfigurationItemCaptureTime :: Lens' ConfigurationItem (Maybe UTCTime) Source #
The time when the configuration recording was initiated.
ciAccountId :: Lens' ConfigurationItem (Maybe Text) Source #
The 12-digit AWS account ID associated with the resource.
ciSupplementaryConfiguration :: Lens' ConfigurationItem (HashMap Text Text) Source #
Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.
ciAvailabilityZone :: Lens' ConfigurationItem (Maybe Text) Source #
The Availability Zone associated with the resource.
ciRelationships :: Lens' ConfigurationItem [Relationship] Source #
A list of related AWS resources.
ciVersion :: Lens' ConfigurationItem (Maybe Text) Source #
The version number of the resource configuration.
ciAwsRegion :: Lens' ConfigurationItem (Maybe Text) Source #
The region where the resource resides.
ciRelatedEvents :: Lens' ConfigurationItem [Text] Source #
A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is AWS CloudTrail . An empty field indicates that the current configuration was not initiated by any event.
ciConfiguration :: Lens' ConfigurationItem (Maybe Text) Source #
The description of the resource configuration.
ciConfigurationItemMD5Hash :: Lens' ConfigurationItem (Maybe Text) Source #
Unique MD5 hash that represents the configuration item's state. You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.
ciTags :: Lens' ConfigurationItem (HashMap Text Text) Source #
A mapping of key value tags associated with the resource.
ConfigurationRecorder
data ConfigurationRecorder Source #
An object that represents the recording of configuration changes of an AWS resource.
See: configurationRecorder smart constructor.
Instances
configurationRecorder :: ConfigurationRecorder Source #
Creates a value of ConfigurationRecorder with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crName- The name of the recorder. By default, AWS Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.crRecordingGroup- Specifies the types of AWS resources for which AWS Config records configuration changes.crRoleARN- Amazon Resource Name (ARN) of the IAM role used to describe the AWS resources associated with the account.
crName :: Lens' ConfigurationRecorder (Maybe Text) Source #
The name of the recorder. By default, AWS Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.
crRecordingGroup :: Lens' ConfigurationRecorder (Maybe RecordingGroup) Source #
Specifies the types of AWS resources for which AWS Config records configuration changes.
crRoleARN :: Lens' ConfigurationRecorder (Maybe Text) Source #
Amazon Resource Name (ARN) of the IAM role used to describe the AWS resources associated with the account.
ConfigurationRecorderStatus
data ConfigurationRecorderStatus Source #
The current status of the configuration recorder.
See: configurationRecorderStatus smart constructor.
Instances
configurationRecorderStatus :: ConfigurationRecorderStatus Source #
Creates a value of ConfigurationRecorderStatus with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crsLastErrorCode- The error code indicating that the recording failed.crsLastStopTime- The time the recorder was last stopped.crsLastStatusChangeTime- The time when the status was last changed.crsRecording- Specifies whether or not the recorder is currently recording.crsLastStatus- The last (previous) status of the recorder.crsLastErrorMessage- The message indicating that the recording failed due to an error.crsName- The name of the configuration recorder.crsLastStartTime- The time the recorder was last started.
crsLastErrorCode :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The error code indicating that the recording failed.
crsLastStopTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time the recorder was last stopped.
crsLastStatusChangeTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time when the status was last changed.
crsRecording :: Lens' ConfigurationRecorderStatus (Maybe Bool) Source #
Specifies whether or not the recorder is currently recording.
crsLastStatus :: Lens' ConfigurationRecorderStatus (Maybe RecorderStatus) Source #
The last (previous) status of the recorder.
crsLastErrorMessage :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The message indicating that the recording failed due to an error.
crsName :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The name of the configuration recorder.
crsLastStartTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time the recorder was last started.
DeliveryChannel
data DeliveryChannel Source #
The channel through which AWS Config delivers notifications and updated configuration states.
See: deliveryChannel smart constructor.
Instances
deliveryChannel :: DeliveryChannel Source #
Creates a value of DeliveryChannel with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dcS3KeyPrefix- The prefix for the specified Amazon S3 bucket.dcSnsTopicARN- The Amazon Resource Name (ARN) of the Amazon SNS topic to which AWS Config sends notifications about configuration changes. If you choose a topic from another account, the topic must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon SNS Topic in the AWS Config Developer Guide.dcName- The name of the delivery channel. By default, AWS Config assigns the name "default" when creating the delivery channel. To change the delivery channel name, you must use the DeleteDeliveryChannel action to delete your current delivery channel, and then you must use the PutDeliveryChannel command to create a delivery channel that has the desired name.dcConfigSnapshotDeliveryProperties- The options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket.dcS3BucketName- The name of the Amazon S3 bucket to which AWS Config delivers configuration snapshots and configuration history files. If you specify a bucket that belongs to another AWS account, that bucket must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon S3 Bucket in the AWS Config Developer Guide.
dcS3KeyPrefix :: Lens' DeliveryChannel (Maybe Text) Source #
The prefix for the specified Amazon S3 bucket.
dcSnsTopicARN :: Lens' DeliveryChannel (Maybe Text) Source #
The Amazon Resource Name (ARN) of the Amazon SNS topic to which AWS Config sends notifications about configuration changes. If you choose a topic from another account, the topic must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon SNS Topic in the AWS Config Developer Guide.
dcName :: Lens' DeliveryChannel (Maybe Text) Source #
The name of the delivery channel. By default, AWS Config assigns the name "default" when creating the delivery channel. To change the delivery channel name, you must use the DeleteDeliveryChannel action to delete your current delivery channel, and then you must use the PutDeliveryChannel command to create a delivery channel that has the desired name.
dcConfigSnapshotDeliveryProperties :: Lens' DeliveryChannel (Maybe ConfigSnapshotDeliveryProperties) Source #
The options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket.
dcS3BucketName :: Lens' DeliveryChannel (Maybe Text) Source #
The name of the Amazon S3 bucket to which AWS Config delivers configuration snapshots and configuration history files. If you specify a bucket that belongs to another AWS account, that bucket must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon S3 Bucket in the AWS Config Developer Guide.
DeliveryChannelStatus
data DeliveryChannelStatus Source #
The status of a specified delivery channel.
Valid values: Success | Failure
See: deliveryChannelStatus smart constructor.
Instances
deliveryChannelStatus :: DeliveryChannelStatus Source #
Creates a value of DeliveryChannelStatus with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dcsConfigSnapshotDeliveryInfo- A list containing the status of the delivery of the snapshot to the specified Amazon S3 bucket.dcsConfigStreamDeliveryInfo- A list containing the status of the delivery of the configuration stream notification to the specified Amazon SNS topic.dcsConfigHistoryDeliveryInfo- A list that contains the status of the delivery of the configuration history to the specified Amazon S3 bucket.dcsName- The name of the delivery channel.
dcsConfigSnapshotDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source #
A list containing the status of the delivery of the snapshot to the specified Amazon S3 bucket.
dcsConfigStreamDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigStreamDeliveryInfo) Source #
A list containing the status of the delivery of the configuration stream notification to the specified Amazon SNS topic.
dcsConfigHistoryDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source #
A list that contains the status of the delivery of the configuration history to the specified Amazon S3 bucket.
Evaluation
data Evaluation Source #
Identifies an AWS resource and indicates whether it complies with the AWS Config rule that it was evaluated against.
See: evaluation smart constructor.
Arguments
| :: Text | |
| -> Text | |
| -> ComplianceType | |
| -> UTCTime | |
| -> Evaluation |
Creates a value of Evaluation with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
eAnnotation- Supplementary information about how the evaluation determined the compliance.eComplianceResourceType- The type of AWS resource that was evaluated.eComplianceResourceId- The ID of the AWS resource that was evaluated.eComplianceType- Indicates whether the AWS resource complies with the AWS Config rule that it was evaluated against. For theEvaluationdata type, AWS Config supports only theCOMPLIANT,NON_COMPLIANT, andNOT_APPLICABLEvalues. AWS Config does not support theINSUFFICIENT_DATAvalue for this data type. Similarly, AWS Config does not acceptINSUFFICIENT_DATAas the value forComplianceTypefrom aPutEvaluationsrequest. For example, an AWS Lambda function for a custom AWS Config rule cannot pass anINSUFFICIENT_DATAvalue to AWS Config.eOrderingTimestamp- The time of the event in AWS Config that triggered the evaluation. For event-based evaluations, the time indicates when AWS Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when AWS Config triggered the evaluation at the frequency that you specified (for example, every 24 hours).
eAnnotation :: Lens' Evaluation (Maybe Text) Source #
Supplementary information about how the evaluation determined the compliance.
eComplianceResourceType :: Lens' Evaluation Text Source #
The type of AWS resource that was evaluated.
eComplianceResourceId :: Lens' Evaluation Text Source #
The ID of the AWS resource that was evaluated.
eComplianceType :: Lens' Evaluation ComplianceType Source #
Indicates whether the AWS resource complies with the AWS Config rule that it was evaluated against. For the Evaluation data type, AWS Config supports only the COMPLIANT , NON_COMPLIANT , and NOT_APPLICABLE values. AWS Config does not support the INSUFFICIENT_DATA value for this data type. Similarly, AWS Config does not accept INSUFFICIENT_DATA as the value for ComplianceType from a PutEvaluations request. For example, an AWS Lambda function for a custom AWS Config rule cannot pass an INSUFFICIENT_DATA value to AWS Config.
eOrderingTimestamp :: Lens' Evaluation UTCTime Source #
The time of the event in AWS Config that triggered the evaluation. For event-based evaluations, the time indicates when AWS Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when AWS Config triggered the evaluation at the frequency that you specified (for example, every 24 hours).
EvaluationResult
data EvaluationResult Source #
The details of an AWS Config evaluation. Provides the AWS resource that was evaluated, the compliance of the resource, related time stamps, and supplementary information.
See: evaluationResult smart constructor.
Instances
evaluationResult :: EvaluationResult Source #
Creates a value of EvaluationResult with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
erEvaluationResultIdentifier- Uniquely identifies the evaluation result.erAnnotation- Supplementary information about how the evaluation determined the compliance.erConfigRuleInvokedTime- The time when the AWS Config rule evaluated the AWS resource.erResultRecordedTime- The time when AWS Config recorded the evaluation result.erResultToken- An encrypted token that associates an evaluation with an AWS Config rule. The token identifies the rule, the AWS resource being evaluated, and the event that triggered the evaluation.erComplianceType- Indicates whether the AWS resource complies with the AWS Config rule that evaluated it. For theEvaluationResultdata type, AWS Config supports only theCOMPLIANT,NON_COMPLIANT, andNOT_APPLICABLEvalues. AWS Config does not support theINSUFFICIENT_DATAvalue for theEvaluationResultdata type.
erEvaluationResultIdentifier :: Lens' EvaluationResult (Maybe EvaluationResultIdentifier) Source #
Uniquely identifies the evaluation result.
erAnnotation :: Lens' EvaluationResult (Maybe Text) Source #
Supplementary information about how the evaluation determined the compliance.
erConfigRuleInvokedTime :: Lens' EvaluationResult (Maybe UTCTime) Source #
The time when the AWS Config rule evaluated the AWS resource.
erResultRecordedTime :: Lens' EvaluationResult (Maybe UTCTime) Source #
The time when AWS Config recorded the evaluation result.
erResultToken :: Lens' EvaluationResult (Maybe Text) Source #
An encrypted token that associates an evaluation with an AWS Config rule. The token identifies the rule, the AWS resource being evaluated, and the event that triggered the evaluation.
erComplianceType :: Lens' EvaluationResult (Maybe ComplianceType) Source #
Indicates whether the AWS resource complies with the AWS Config rule that evaluated it. For the EvaluationResult data type, AWS Config supports only the COMPLIANT , NON_COMPLIANT , and NOT_APPLICABLE values. AWS Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type.
EvaluationResultIdentifier
data EvaluationResultIdentifier Source #
Uniquely identifies an evaluation result.
See: evaluationResultIdentifier smart constructor.
Instances
evaluationResultIdentifier :: EvaluationResultIdentifier Source #
Creates a value of EvaluationResultIdentifier with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
eriEvaluationResultQualifier- Identifies an AWS Config rule used to evaluate an AWS resource, and provides the type and ID of the evaluated resource.eriOrderingTimestamp- The time of the event that triggered the evaluation of your AWS resources. The time can indicate when AWS Config delivered a configuration item change notification, or it can indicate when AWS Config delivered the configuration snapshot, depending on which event triggered the evaluation.
eriEvaluationResultQualifier :: Lens' EvaluationResultIdentifier (Maybe EvaluationResultQualifier) Source #
Identifies an AWS Config rule used to evaluate an AWS resource, and provides the type and ID of the evaluated resource.
eriOrderingTimestamp :: Lens' EvaluationResultIdentifier (Maybe UTCTime) Source #
The time of the event that triggered the evaluation of your AWS resources. The time can indicate when AWS Config delivered a configuration item change notification, or it can indicate when AWS Config delivered the configuration snapshot, depending on which event triggered the evaluation.
EvaluationResultQualifier
data EvaluationResultQualifier Source #
Identifies an AWS Config rule that evaluated an AWS resource, and provides the type and ID of the resource that the rule evaluated.
See: evaluationResultQualifier smart constructor.
Instances
evaluationResultQualifier :: EvaluationResultQualifier Source #
Creates a value of EvaluationResultQualifier with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
erqResourceId- The ID of the evaluated AWS resource.erqResourceType- The type of AWS resource that was evaluated.erqConfigRuleName- The name of the AWS Config rule that was used in the evaluation.
erqResourceId :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The ID of the evaluated AWS resource.
erqResourceType :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The type of AWS resource that was evaluated.
erqConfigRuleName :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The name of the AWS Config rule that was used in the evaluation.
OrganizationAggregationSource
data OrganizationAggregationSource Source #
This object contains regions to setup the aggregator and an IAM role to retrieve organization details.
See: organizationAggregationSource smart constructor.
Instances
organizationAggregationSource Source #
Arguments
| :: Text | |
| -> OrganizationAggregationSource |
Creates a value of OrganizationAggregationSource with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
oasAWSRegions- The source regions being aggregated.oasAllAWSRegions- If true, aggreagate existing AWS Config regions and future regions.oasRoleARN- ARN of the IAM role used to retreive AWS Organization details associated with the aggregator account.
oasAWSRegions :: Lens' OrganizationAggregationSource (Maybe (NonEmpty Text)) Source #
The source regions being aggregated.
oasAllAWSRegions :: Lens' OrganizationAggregationSource (Maybe Bool) Source #
If true, aggreagate existing AWS Config regions and future regions.
oasRoleARN :: Lens' OrganizationAggregationSource Text Source #
ARN of the IAM role used to retreive AWS Organization details associated with the aggregator account.
PendingAggregationRequest
data PendingAggregationRequest Source #
An object that represents the account ID and region of an aggregator account that is requesting authorization but is not yet authorized.
See: pendingAggregationRequest smart constructor.
Instances
pendingAggregationRequest :: PendingAggregationRequest Source #
Creates a value of PendingAggregationRequest with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
parRequesterAccountId- The 12-digit account ID of the account requesting to aggregate data.parRequesterAWSRegion- The region requesting to aggregate data.
parRequesterAccountId :: Lens' PendingAggregationRequest (Maybe Text) Source #
The 12-digit account ID of the account requesting to aggregate data.
parRequesterAWSRegion :: Lens' PendingAggregationRequest (Maybe Text) Source #
The region requesting to aggregate data.
RecordingGroup
data RecordingGroup Source #
Specifies the types of AWS resource for which AWS Config records configuration changes.
In the recording group, you specify whether all supported types or specific types of resources are recorded.
By default, AWS Config records configuration changes for all supported types of regional resources that AWS Config discovers in the region in which it is running. Regional resources are tied to a region and can be used only in that region. Examples of regional resources are EC2 instances and EBS volumes.
You can also have AWS Config record configuration changes for supported types of global resources (for example, IAM resources). Global resources are not tied to an individual region and can be used in all regions.
Important: The configuration details for any global resource are the same in all regions. If you customize AWS Config in multiple regions to record global resources, it will create multiple configuration items each time a global resource changes: one configuration item for each region. These configuration items will contain identical data. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources, unless you want the configuration items to be available in multiple regions.
If you don't want AWS Config to record all resources, you can specify which types of resources it will record with the resourceTypes parameter.
For a list of supported resource types, see Supported Resource Types .
For more information, see Selecting Which Resources AWS Config Records .
See: recordingGroup smart constructor.
Instances
recordingGroup :: RecordingGroup Source #
Creates a value of RecordingGroup with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rgAllSupported- Specifies whether AWS Config records configuration changes for every supported type of regional resource. If you set this option totrue, when AWS Config adds support for a new type of regional resource, it starts recording resources of that type automatically. If you set this option totrue, you cannot enumerate a list ofresourceTypes.rgIncludeGlobalResourceTypes- Specifies whether AWS Config includes all supported types of global resources (for example, IAM resources) with the resources that it records. Before you can set this option totrue, you must set theallSupportedoption totrue. If you set this option totrue, when AWS Config adds support for a new type of global resource, it starts recording resources of that type automatically. The configuration details for any global resource are the same in all regions. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources.rgResourceTypes- A comma-separated list that specifies the types of AWS resources for which AWS Config records configuration changes (for example,AWS::EC2::InstanceorAWS::CloudTrail::Trail). Before you can set this option totrue, you must set theallSupportedoption tofalse. If you set this option totrue, when AWS Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of validresourceTypesvalues, see the resourceType Value column in Supported AWS Resource Types .
rgAllSupported :: Lens' RecordingGroup (Maybe Bool) Source #
Specifies whether AWS Config records configuration changes for every supported type of regional resource. If you set this option to true , when AWS Config adds support for a new type of regional resource, it starts recording resources of that type automatically. If you set this option to true , you cannot enumerate a list of resourceTypes .
rgIncludeGlobalResourceTypes :: Lens' RecordingGroup (Maybe Bool) Source #
Specifies whether AWS Config includes all supported types of global resources (for example, IAM resources) with the resources that it records. Before you can set this option to true , you must set the allSupported option to true . If you set this option to true , when AWS Config adds support for a new type of global resource, it starts recording resources of that type automatically. The configuration details for any global resource are the same in all regions. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources.
rgResourceTypes :: Lens' RecordingGroup [ResourceType] Source #
A comma-separated list that specifies the types of AWS resources for which AWS Config records configuration changes (for example, AWS::EC2::Instance or AWS::CloudTrail::Trail ). Before you can set this option to true , you must set the allSupported option to false . If you set this option to true , when AWS Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of valid resourceTypes values, see the resourceType Value column in Supported AWS Resource Types .
Relationship
data Relationship Source #
The relationship of the related resource to the main resource.
See: relationship smart constructor.
relationship :: Relationship Source #
Creates a value of Relationship with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rResourceId- The ID of the related resource (for example,sg-xxxxxx).rResourceType- The resource type of the related resource.rResourceName- The custom name of the related resource, if available.rRelationshipName- The type of relationship with the related resource.
rResourceId :: Lens' Relationship (Maybe Text) Source #
The ID of the related resource (for example, sg-xxxxxx ).
rResourceType :: Lens' Relationship (Maybe ResourceType) Source #
The resource type of the related resource.
rResourceName :: Lens' Relationship (Maybe Text) Source #
The custom name of the related resource, if available.
rRelationshipName :: Lens' Relationship (Maybe Text) Source #
The type of relationship with the related resource.
ResourceCount
data ResourceCount Source #
An object that contains the resource type and the number of resources.
See: resourceCount smart constructor.
resourceCount :: ResourceCount Source #
Creates a value of ResourceCount with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rcResourceType- The resource type (for example,AWS::EC2::Instance).rcCount- The number of resources.
rcResourceType :: Lens' ResourceCount (Maybe ResourceType) Source #
The resource type (for example, AWS::EC2::Instance ).
ResourceIdentifier
data ResourceIdentifier Source #
The details that identify a resource that is discovered by AWS Config, including the resource type, ID, and (if available) the custom resource name.
See: resourceIdentifier smart constructor.
Instances
resourceIdentifier :: ResourceIdentifier Source #
Creates a value of ResourceIdentifier with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
riResourceId- The ID of the resource (for example,sg-xxxxxx).riResourceType- The type of resource.riResourceName- The custom name of the resource (if available).riResourceDeletionTime- The time that the resource was deleted.
riResourceId :: Lens' ResourceIdentifier (Maybe Text) Source #
The ID of the resource (for example, sg-xxxxxx ).
riResourceType :: Lens' ResourceIdentifier (Maybe ResourceType) Source #
The type of resource.
riResourceName :: Lens' ResourceIdentifier (Maybe Text) Source #
The custom name of the resource (if available).
riResourceDeletionTime :: Lens' ResourceIdentifier (Maybe UTCTime) Source #
The time that the resource was deleted.
ResourceKey
data ResourceKey Source #
The details that identify a resource within AWS Config, including the resource type and resource ID.
See: resourceKey smart constructor.
Arguments
| :: ResourceType | |
| -> Text | |
| -> ResourceKey |
Creates a value of ResourceKey with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rkResourceType- The resource type.rkResourceId- The ID of the resource (for example., sg-xxxxxx).
rkResourceType :: Lens' ResourceKey ResourceType Source #
The resource type.
rkResourceId :: Lens' ResourceKey Text Source #
The ID of the resource (for example., sg-xxxxxx).
Scope
Defines which resources trigger an evaluation for an AWS Config rule. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. Specify a scope to constrain which resources trigger an evaluation for a rule. Otherwise, evaluations for the rule are triggered when any resource in your recording group changes in configuration.
See: scope smart constructor.
Creates a value of Scope with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sComplianceResourceTypes- The resource types of only those AWS resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID forComplianceResourceId.sComplianceResourceId- The ID of the only AWS resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type forComplianceResourceTypes.sTagValue- The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule. If you specify a value forTagValue, you must also specify a value forTagKey.sTagKey- The tag key that is applied to only those AWS resources that you want to trigger an evaluation for the rule.
sComplianceResourceTypes :: Lens' Scope [Text] Source #
The resource types of only those AWS resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID for ComplianceResourceId .
sComplianceResourceId :: Lens' Scope (Maybe Text) Source #
The ID of the only AWS resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type for ComplianceResourceTypes .
sTagValue :: Lens' Scope (Maybe Text) Source #
The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule. If you specify a value for TagValue , you must also specify a value for TagKey .
sTagKey :: Lens' Scope (Maybe Text) Source #
The tag key that is applied to only those AWS resources that you want to trigger an evaluation for the rule.
Source
Provides the AWS Config rule owner (AWS or customer), the rule identifier, and the events that trigger the evaluation of your AWS resources.
See: source smart constructor.
Creates a value of Source with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sSourceDetails- Provides the source and type of the event that causes AWS Config to evaluate your AWS resources.sOwner- Indicates whether AWS or the customer owns and manages the AWS Config rule.sSourceIdentifier- For AWS Config managed rules, a predefined identifier from a list. For example,IAM_PASSWORD_POLICYis a managed rule. To reference a managed rule, see Using AWS Managed Config Rules . For custom rules, the identifier is the Amazon Resource Name (ARN) of the rule's AWS Lambda function, such asarn:aws:lambda:us-east-2:123456789012:function:custom_rule_name.
sSourceDetails :: Lens' Source [SourceDetail] Source #
Provides the source and type of the event that causes AWS Config to evaluate your AWS resources.
sOwner :: Lens' Source Owner Source #
Indicates whether AWS or the customer owns and manages the AWS Config rule.
sSourceIdentifier :: Lens' Source Text Source #
For AWS Config managed rules, a predefined identifier from a list. For example, IAM_PASSWORD_POLICY is a managed rule. To reference a managed rule, see Using AWS Managed Config Rules . For custom rules, the identifier is the Amazon Resource Name (ARN) of the rule's AWS Lambda function, such as arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name .
SourceDetail
data SourceDetail Source #
Provides the source and the message types that trigger AWS Config to evaluate your AWS resources against a rule. It also provides the frequency with which you want AWS Config to run evaluations for the rule if the trigger type is periodic. You can specify the parameter values for SourceDetail only for custom rules.
See: sourceDetail smart constructor.
sourceDetail :: SourceDetail Source #
Creates a value of SourceDetail with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sdMessageType- The type of notification that triggers AWS Config to run an evaluation for a rule. You can specify the following notification types: *ConfigurationItemChangeNotification- Triggers an evaluation when AWS Config delivers a configuration item as a result of a resource change. *OversizedConfigurationItemChangeNotification- Triggers an evaluation when AWS Config delivers an oversized configuration item. AWS Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. *ScheduledNotification- Triggers a periodic evaluation at the frequency specified forMaximumExecutionFrequency. *ConfigurationSnapshotDeliveryCompleted- Triggers a periodic evaluation when AWS Config delivers a configuration snapshot. If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one forConfigurationItemChangeNotificationand one forOversizedConfigurationItemChangeNotification.sdMaximumExecutionFrequency- The frequency at which you want AWS Config to run evaluations for a custom rule with a periodic trigger. If you specify a value forMaximumExecutionFrequency, thenMessageTypemust use theScheduledNotificationvalue.sdEventSource- The source of the event, such as an AWS service, that triggers AWS Config to evaluate your AWS resources.
sdMessageType :: Lens' SourceDetail (Maybe MessageType) Source #
The type of notification that triggers AWS Config to run an evaluation for a rule. You can specify the following notification types: * ConfigurationItemChangeNotification - Triggers an evaluation when AWS Config delivers a configuration item as a result of a resource change. * OversizedConfigurationItemChangeNotification - Triggers an evaluation when AWS Config delivers an oversized configuration item. AWS Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. * ScheduledNotification - Triggers a periodic evaluation at the frequency specified for MaximumExecutionFrequency . * ConfigurationSnapshotDeliveryCompleted - Triggers a periodic evaluation when AWS Config delivers a configuration snapshot. If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one for ConfigurationItemChangeNotification and one for OversizedConfigurationItemChangeNotification .
sdMaximumExecutionFrequency :: Lens' SourceDetail (Maybe MaximumExecutionFrequency) Source #
The frequency at which you want AWS Config to run evaluations for a custom rule with a periodic trigger. If you specify a value for MaximumExecutionFrequency , then MessageType must use the ScheduledNotification value.
sdEventSource :: Lens' SourceDetail (Maybe EventSource) Source #
The source of the event, such as an AWS service, that triggers AWS Config to evaluate your AWS resources.