Copyright | (c) 2013-2018 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
Language | Haskell2010 |
- Service Configuration
- Errors
- InvalidTimeRangeException
- InvalidSNSTopicARNException
- InvalidRecordingGroupException
- NoAvailableOrganizationException
- ValidationException
- OrganizationAccessDeniedException
- NoSuchConfigurationAggregatorException
- InvalidRoleException
- LastDeliveryChannelDeleteFailedException
- InvalidLimitException
- InvalidDeliveryChannelNameException
- InvalidParameterValueException
- InvalidResultTokenException
- NoSuchDeliveryChannelException
- NoSuchConfigRuleException
- OrganizationAllFeaturesNotEnabledException
- InsufficientPermissionsException
- ResourceNotDiscoveredException
- InvalidNextTokenException
- MaxNumberOfConfigRulesExceededException
- NoAvailableConfigurationRecorderException
- NoSuchBucketException
- NoAvailableDeliveryChannelException
- InvalidConfigurationRecorderNameException
- NoRunningConfigurationRecorderException
- MaxNumberOfConfigurationRecordersExceededException
- InsufficientDeliveryPolicyException
- MaxNumberOfDeliveryChannelsExceededException
- NoSuchConfigurationRecorderException
- InvalidS3KeyPrefixException
- LimitExceededException
- ResourceInUseException
- Waiters
- Operations
- DescribePendingAggregationRequests
- GetResourceConfigHistory (Paginated)
- DescribeConfigurationAggregators
- DescribeComplianceByConfigRule (Paginated)
- StopConfigurationRecorder
- GetAggregateConfigRuleComplianceSummary
- BatchGetResourceConfig
- DescribeConfigRules (Paginated)
- DescribeAggregateComplianceByConfigRules
- DeleteEvaluationResults
- PutConfigRule
- DeleteConfigRule
- GetComplianceDetailsByResource (Paginated)
- DeletePendingAggregationRequest
- DeliverConfigSnapshot
- DescribeConfigRuleEvaluationStatus
- GetDiscoveredResourceCounts
- StartConfigRulesEvaluation
- DescribeComplianceByResource (Paginated)
- PutEvaluations
- DescribeConfigurationRecorders
- GetAggregateComplianceDetailsByConfigRule
- StartConfigurationRecorder
- GetComplianceSummaryByConfigRule
- PutConfigurationAggregator
- DeleteConfigurationAggregator
- DescribeConfigurationRecorderStatus
- PutConfigurationRecorder
- DeleteConfigurationRecorder
- GetComplianceSummaryByResourceType
- DescribeDeliveryChannelStatus
- PutDeliveryChannel
- GetComplianceDetailsByConfigRule (Paginated)
- DeleteAggregationAuthorization
- DeleteDeliveryChannel
- PutAggregationAuthorization
- DescribeConfigurationAggregatorSourcesStatus
- ListDiscoveredResources (Paginated)
- DescribeDeliveryChannels
- DescribeAggregationAuthorizations
- Types
- AggregatedSourceStatusType
- AggregatedSourceType
- ChronologicalOrder
- ComplianceType
- ConfigRuleComplianceSummaryGroupKey
- ConfigRuleState
- ConfigurationItemStatus
- DeliveryStatus
- EventSource
- MaximumExecutionFrequency
- MessageType
- Owner
- RecorderStatus
- ResourceType
- AccountAggregationSource
- AggregateComplianceByConfigRule
- AggregateComplianceCount
- AggregateEvaluationResult
- AggregatedSourceStatus
- AggregationAuthorization
- BaseConfigurationItem
- Compliance
- ComplianceByConfigRule
- ComplianceByResource
- ComplianceContributorCount
- ComplianceSummary
- ComplianceSummaryByResourceType
- ConfigExportDeliveryInfo
- ConfigRule
- ConfigRuleComplianceFilters
- ConfigRuleComplianceSummaryFilters
- ConfigRuleEvaluationStatus
- ConfigSnapshotDeliveryProperties
- ConfigStreamDeliveryInfo
- ConfigurationAggregator
- ConfigurationItem
- ConfigurationRecorder
- ConfigurationRecorderStatus
- DeliveryChannel
- DeliveryChannelStatus
- Evaluation
- EvaluationResult
- EvaluationResultIdentifier
- EvaluationResultQualifier
- OrganizationAggregationSource
- PendingAggregationRequest
- RecordingGroup
- Relationship
- ResourceCount
- ResourceIdentifier
- ResourceKey
- Scope
- Source
- SourceDetail
AWS Config
AWS Config provides a way to keep track of the configurations of all the AWS resources associated with your AWS account. You can use AWS Config to get the current and historical configurations of each AWS resource and also to get information about the relationship between the resources. An AWS resource can be an Amazon Compute Cloud (Amazon EC2) instance, an Elastic Block Store (EBS) volume, an elastic network Interface (ENI), or a security group. For a complete list of resources currently supported by AWS Config, see Supported AWS Resources .
You can access and manage AWS Config through the AWS Management Console, the AWS Command Line Interface (AWS CLI), the AWS Config API, or the AWS SDKs for AWS Config. This reference guide contains documentation for the AWS Config API and the AWS CLI commands that you can use to manage AWS Config. The AWS Config API uses the Signature Version 4 protocol for signing requests. For more information about how to sign a request with this protocol, see Signature Version 4 Signing Process . For detailed information about AWS Config features and their associated actions or commands, as well as how to work with AWS Management Console, see What Is AWS Config in the AWS Config Developer Guide .
- config :: Service
- _InvalidTimeRangeException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidSNSTopicARNException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRecordingGroupException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableOrganizationException :: AsError a => Getting (First ServiceError) a ServiceError
- _ValidationException :: AsError a => Getting (First ServiceError) a ServiceError
- _OrganizationAccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigurationAggregatorException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidRoleException :: AsError a => Getting (First ServiceError) a ServiceError
- _LastDeliveryChannelDeleteFailedException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidLimitException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidDeliveryChannelNameException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidParameterValueException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidResultTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigRuleException :: AsError a => Getting (First ServiceError) a ServiceError
- _OrganizationAllFeaturesNotEnabledException :: AsError a => Getting (First ServiceError) a ServiceError
- _InsufficientPermissionsException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceNotDiscoveredException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfConfigRulesExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchBucketException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoAvailableDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidConfigurationRecorderNameException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoRunningConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfConfigurationRecordersExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _InsufficientDeliveryPolicyException :: AsError a => Getting (First ServiceError) a ServiceError
- _MaxNumberOfDeliveryChannelsExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _NoSuchConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError
- _InvalidS3KeyPrefixException :: AsError a => Getting (First ServiceError) a ServiceError
- _LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError
- _ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError
- module Network.AWS.Config.DescribePendingAggregationRequests
- module Network.AWS.Config.GetResourceConfigHistory
- module Network.AWS.Config.DescribeConfigurationAggregators
- module Network.AWS.Config.DescribeComplianceByConfigRule
- module Network.AWS.Config.StopConfigurationRecorder
- module Network.AWS.Config.GetAggregateConfigRuleComplianceSummary
- module Network.AWS.Config.BatchGetResourceConfig
- module Network.AWS.Config.DescribeConfigRules
- module Network.AWS.Config.DescribeAggregateComplianceByConfigRules
- module Network.AWS.Config.DeleteEvaluationResults
- module Network.AWS.Config.PutConfigRule
- module Network.AWS.Config.DeleteConfigRule
- module Network.AWS.Config.GetComplianceDetailsByResource
- module Network.AWS.Config.DeletePendingAggregationRequest
- module Network.AWS.Config.DeliverConfigSnapshot
- module Network.AWS.Config.DescribeConfigRuleEvaluationStatus
- module Network.AWS.Config.GetDiscoveredResourceCounts
- module Network.AWS.Config.StartConfigRulesEvaluation
- module Network.AWS.Config.DescribeComplianceByResource
- module Network.AWS.Config.PutEvaluations
- module Network.AWS.Config.DescribeConfigurationRecorders
- module Network.AWS.Config.GetAggregateComplianceDetailsByConfigRule
- module Network.AWS.Config.StartConfigurationRecorder
- module Network.AWS.Config.GetComplianceSummaryByConfigRule
- module Network.AWS.Config.PutConfigurationAggregator
- module Network.AWS.Config.DeleteConfigurationAggregator
- module Network.AWS.Config.DescribeConfigurationRecorderStatus
- module Network.AWS.Config.PutConfigurationRecorder
- module Network.AWS.Config.DeleteConfigurationRecorder
- module Network.AWS.Config.GetComplianceSummaryByResourceType
- module Network.AWS.Config.DescribeDeliveryChannelStatus
- module Network.AWS.Config.PutDeliveryChannel
- module Network.AWS.Config.GetComplianceDetailsByConfigRule
- module Network.AWS.Config.DeleteAggregationAuthorization
- module Network.AWS.Config.DeleteDeliveryChannel
- module Network.AWS.Config.PutAggregationAuthorization
- module Network.AWS.Config.DescribeConfigurationAggregatorSourcesStatus
- module Network.AWS.Config.ListDiscoveredResources
- module Network.AWS.Config.DescribeDeliveryChannels
- module Network.AWS.Config.DescribeAggregationAuthorizations
- data AggregatedSourceStatusType
- data AggregatedSourceType
- data ChronologicalOrder
- data ComplianceType
- data ConfigRuleComplianceSummaryGroupKey
- data ConfigRuleState
- data ConfigurationItemStatus
- data DeliveryStatus
- data EventSource = AWS_Config
- data MaximumExecutionFrequency
- data MessageType
- data Owner
- = AWS
- | CustomLambda
- data RecorderStatus
- data ResourceType
- = AWSAcmCertificate
- | AWSAutoScalingAutoScalingGroup
- | AWSAutoScalingLaunchConfiguration
- | AWSAutoScalingScalingPolicy
- | AWSAutoScalingScheduledAction
- | AWSCloudFormationStack
- | AWSCloudFrontDistribution
- | AWSCloudFrontStreamingDistribution
- | AWSCloudTrailTrail
- | AWSCloudWatchAlarm
- | AWSCodeBuildProject
- | AWSDynamoDBTable
- | AWSEC2CustomerGateway
- | AWSEC2EIP
- | AWSEC2Host
- | AWSEC2Instance
- | AWSEC2InternetGateway
- | AWSEC2NetworkACL
- | AWSEC2NetworkInterface
- | AWSEC2RouteTable
- | AWSEC2SecurityGroup
- | AWSEC2Subnet
- | AWSEC2VPC
- | AWSEC2VPNConnection
- | AWSEC2VPNGateway
- | AWSEC2Volume
- | AWSELASTICLOADBALANCINGV2LoadBalancer
- | AWSElasticBeanstalkApplication
- | AWSElasticBeanstalkApplicationVersion
- | AWSElasticBeanstalkEnvironment
- | AWSElasticLoadBalancingLoadBalancer
- | AWSIAMGroup
- | AWSIAMPolicy
- | AWSIAMRole
- | AWSIAMUser
- | AWSLambdaFunction
- | AWSRDSDBInstance
- | AWSRDSDBSecurityGroup
- | AWSRDSDBSnapshot
- | AWSRDSDBSubnetGroup
- | AWSRDSEventSubscription
- | AWSRedshiftCluster
- | AWSRedshiftClusterParameterGroup
- | AWSRedshiftClusterSecurityGroup
- | AWSRedshiftClusterSnapshot
- | AWSRedshiftClusterSubnetGroup
- | AWSRedshiftEventSubscription
- | AWSS3Bucket
- | AWSSsmManagedInstanceInventory
- | AWSWAFRegionalRateBasedRule
- | AWSWAFRegionalRule
- | AWSWAFRegionalRuleGroup
- | AWSWAFRegionalWebACL
- | AWSWafRateBasedRule
- | AWSWafRule
- | AWSWafRuleGroup
- | AWSWafWebACL
- data AccountAggregationSource
- accountAggregationSource :: NonEmpty Text -> AccountAggregationSource
- aasAWSRegions :: Lens' AccountAggregationSource (Maybe (NonEmpty Text))
- aasAllAWSRegions :: Lens' AccountAggregationSource (Maybe Bool)
- aasAccountIds :: Lens' AccountAggregationSource (NonEmpty Text)
- data AggregateComplianceByConfigRule
- aggregateComplianceByConfigRule :: AggregateComplianceByConfigRule
- acbcrCompliance :: Lens' AggregateComplianceByConfigRule (Maybe Compliance)
- acbcrConfigRuleName :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- acbcrAccountId :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- acbcrAWSRegion :: Lens' AggregateComplianceByConfigRule (Maybe Text)
- data AggregateComplianceCount
- aggregateComplianceCount :: AggregateComplianceCount
- accGroupName :: Lens' AggregateComplianceCount (Maybe Text)
- accComplianceSummary :: Lens' AggregateComplianceCount (Maybe ComplianceSummary)
- data AggregateEvaluationResult
- aggregateEvaluationResult :: AggregateEvaluationResult
- aerEvaluationResultIdentifier :: Lens' AggregateEvaluationResult (Maybe EvaluationResultIdentifier)
- aerAnnotation :: Lens' AggregateEvaluationResult (Maybe Text)
- aerConfigRuleInvokedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime)
- aerResultRecordedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime)
- aerAccountId :: Lens' AggregateEvaluationResult (Maybe Text)
- aerComplianceType :: Lens' AggregateEvaluationResult (Maybe ComplianceType)
- aerAWSRegion :: Lens' AggregateEvaluationResult (Maybe Text)
- data AggregatedSourceStatus
- aggregatedSourceStatus :: AggregatedSourceStatus
- assLastErrorCode :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastUpdateStatus :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceStatusType)
- assSourceType :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceType)
- assSourceId :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastErrorMessage :: Lens' AggregatedSourceStatus (Maybe Text)
- assAWSRegion :: Lens' AggregatedSourceStatus (Maybe Text)
- assLastUpdateTime :: Lens' AggregatedSourceStatus (Maybe UTCTime)
- data AggregationAuthorization
- aggregationAuthorization :: AggregationAuthorization
- aaCreationTime :: Lens' AggregationAuthorization (Maybe UTCTime)
- aaAuthorizedAWSRegion :: Lens' AggregationAuthorization (Maybe Text)
- aaAggregationAuthorizationARN :: Lens' AggregationAuthorization (Maybe Text)
- aaAuthorizedAccountId :: Lens' AggregationAuthorization (Maybe Text)
- data BaseConfigurationItem
- baseConfigurationItem :: BaseConfigurationItem
- bciResourceId :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceType :: Lens' BaseConfigurationItem (Maybe ResourceType)
- bciConfigurationStateId :: Lens' BaseConfigurationItem (Maybe Text)
- bciArn :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceName :: Lens' BaseConfigurationItem (Maybe Text)
- bciResourceCreationTime :: Lens' BaseConfigurationItem (Maybe UTCTime)
- bciConfigurationItemStatus :: Lens' BaseConfigurationItem (Maybe ConfigurationItemStatus)
- bciConfigurationItemCaptureTime :: Lens' BaseConfigurationItem (Maybe UTCTime)
- bciAccountId :: Lens' BaseConfigurationItem (Maybe Text)
- bciSupplementaryConfiguration :: Lens' BaseConfigurationItem (HashMap Text Text)
- bciAvailabilityZone :: Lens' BaseConfigurationItem (Maybe Text)
- bciVersion :: Lens' BaseConfigurationItem (Maybe Text)
- bciAwsRegion :: Lens' BaseConfigurationItem (Maybe Text)
- bciConfiguration :: Lens' BaseConfigurationItem (Maybe Text)
- data Compliance
- compliance :: Compliance
- cComplianceContributorCount :: Lens' Compliance (Maybe ComplianceContributorCount)
- cComplianceType :: Lens' Compliance (Maybe ComplianceType)
- data ComplianceByConfigRule
- complianceByConfigRule :: ComplianceByConfigRule
- cbcrCompliance :: Lens' ComplianceByConfigRule (Maybe Compliance)
- cbcrConfigRuleName :: Lens' ComplianceByConfigRule (Maybe Text)
- data ComplianceByResource
- complianceByResource :: ComplianceByResource
- cbrResourceId :: Lens' ComplianceByResource (Maybe Text)
- cbrResourceType :: Lens' ComplianceByResource (Maybe Text)
- cbrCompliance :: Lens' ComplianceByResource (Maybe Compliance)
- data ComplianceContributorCount
- complianceContributorCount :: ComplianceContributorCount
- cccCappedCount :: Lens' ComplianceContributorCount (Maybe Int)
- cccCapExceeded :: Lens' ComplianceContributorCount (Maybe Bool)
- data ComplianceSummary
- complianceSummary :: ComplianceSummary
- csComplianceSummaryTimestamp :: Lens' ComplianceSummary (Maybe UTCTime)
- csCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount)
- csNonCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount)
- data ComplianceSummaryByResourceType
- complianceSummaryByResourceType :: ComplianceSummaryByResourceType
- csbrtResourceType :: Lens' ComplianceSummaryByResourceType (Maybe Text)
- csbrtComplianceSummary :: Lens' ComplianceSummaryByResourceType (Maybe ComplianceSummary)
- data ConfigExportDeliveryInfo
- configExportDeliveryInfo :: ConfigExportDeliveryInfo
- cediLastErrorCode :: Lens' ConfigExportDeliveryInfo (Maybe Text)
- cediLastAttemptTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- cediLastSuccessfulTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- cediLastStatus :: Lens' ConfigExportDeliveryInfo (Maybe DeliveryStatus)
- cediLastErrorMessage :: Lens' ConfigExportDeliveryInfo (Maybe Text)
- cediNextDeliveryTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime)
- data ConfigRule
- configRule :: Source -> ConfigRule
- crInputParameters :: Lens' ConfigRule (Maybe Text)
- crConfigRuleName :: Lens' ConfigRule (Maybe Text)
- crMaximumExecutionFrequency :: Lens' ConfigRule (Maybe MaximumExecutionFrequency)
- crConfigRuleId :: Lens' ConfigRule (Maybe Text)
- crScope :: Lens' ConfigRule (Maybe Scope)
- crConfigRuleState :: Lens' ConfigRule (Maybe ConfigRuleState)
- crDescription :: Lens' ConfigRule (Maybe Text)
- crConfigRuleARN :: Lens' ConfigRule (Maybe Text)
- crSource :: Lens' ConfigRule Source
- data ConfigRuleComplianceFilters
- configRuleComplianceFilters :: ConfigRuleComplianceFilters
- crcfConfigRuleName :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- crcfAccountId :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- crcfComplianceType :: Lens' ConfigRuleComplianceFilters (Maybe ComplianceType)
- crcfAWSRegion :: Lens' ConfigRuleComplianceFilters (Maybe Text)
- data ConfigRuleComplianceSummaryFilters
- configRuleComplianceSummaryFilters :: ConfigRuleComplianceSummaryFilters
- crcsfAccountId :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text)
- crcsfAWSRegion :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text)
- data ConfigRuleEvaluationStatus
- configRuleEvaluationStatus :: ConfigRuleEvaluationStatus
- cresLastErrorCode :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastFailedEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresFirstActivatedTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresLastSuccessfulEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresConfigRuleName :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastErrorMessage :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresConfigRuleId :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- cresLastFailedInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresFirstEvaluationStarted :: Lens' ConfigRuleEvaluationStatus (Maybe Bool)
- cresLastSuccessfulInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime)
- cresConfigRuleARN :: Lens' ConfigRuleEvaluationStatus (Maybe Text)
- data ConfigSnapshotDeliveryProperties
- configSnapshotDeliveryProperties :: ConfigSnapshotDeliveryProperties
- csdpDeliveryFrequency :: Lens' ConfigSnapshotDeliveryProperties (Maybe MaximumExecutionFrequency)
- data ConfigStreamDeliveryInfo
- configStreamDeliveryInfo :: ConfigStreamDeliveryInfo
- csdiLastErrorCode :: Lens' ConfigStreamDeliveryInfo (Maybe Text)
- csdiLastStatusChangeTime :: Lens' ConfigStreamDeliveryInfo (Maybe UTCTime)
- csdiLastStatus :: Lens' ConfigStreamDeliveryInfo (Maybe DeliveryStatus)
- csdiLastErrorMessage :: Lens' ConfigStreamDeliveryInfo (Maybe Text)
- data ConfigurationAggregator
- configurationAggregator :: ConfigurationAggregator
- caConfigurationAggregatorARN :: Lens' ConfigurationAggregator (Maybe Text)
- caCreationTime :: Lens' ConfigurationAggregator (Maybe UTCTime)
- caOrganizationAggregationSource :: Lens' ConfigurationAggregator (Maybe OrganizationAggregationSource)
- caLastUpdatedTime :: Lens' ConfigurationAggregator (Maybe UTCTime)
- caAccountAggregationSources :: Lens' ConfigurationAggregator [AccountAggregationSource]
- caConfigurationAggregatorName :: Lens' ConfigurationAggregator (Maybe Text)
- data ConfigurationItem
- configurationItem :: ConfigurationItem
- ciResourceId :: Lens' ConfigurationItem (Maybe Text)
- ciResourceType :: Lens' ConfigurationItem (Maybe ResourceType)
- ciConfigurationStateId :: Lens' ConfigurationItem (Maybe Text)
- ciArn :: Lens' ConfigurationItem (Maybe Text)
- ciResourceName :: Lens' ConfigurationItem (Maybe Text)
- ciResourceCreationTime :: Lens' ConfigurationItem (Maybe UTCTime)
- ciConfigurationItemStatus :: Lens' ConfigurationItem (Maybe ConfigurationItemStatus)
- ciConfigurationItemCaptureTime :: Lens' ConfigurationItem (Maybe UTCTime)
- ciAccountId :: Lens' ConfigurationItem (Maybe Text)
- ciSupplementaryConfiguration :: Lens' ConfigurationItem (HashMap Text Text)
- ciAvailabilityZone :: Lens' ConfigurationItem (Maybe Text)
- ciRelationships :: Lens' ConfigurationItem [Relationship]
- ciVersion :: Lens' ConfigurationItem (Maybe Text)
- ciAwsRegion :: Lens' ConfigurationItem (Maybe Text)
- ciRelatedEvents :: Lens' ConfigurationItem [Text]
- ciConfiguration :: Lens' ConfigurationItem (Maybe Text)
- ciConfigurationItemMD5Hash :: Lens' ConfigurationItem (Maybe Text)
- ciTags :: Lens' ConfigurationItem (HashMap Text Text)
- data ConfigurationRecorder
- configurationRecorder :: ConfigurationRecorder
- crName :: Lens' ConfigurationRecorder (Maybe Text)
- crRecordingGroup :: Lens' ConfigurationRecorder (Maybe RecordingGroup)
- crRoleARN :: Lens' ConfigurationRecorder (Maybe Text)
- data ConfigurationRecorderStatus
- configurationRecorderStatus :: ConfigurationRecorderStatus
- crsLastErrorCode :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsLastStopTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- crsLastStatusChangeTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- crsRecording :: Lens' ConfigurationRecorderStatus (Maybe Bool)
- crsLastStatus :: Lens' ConfigurationRecorderStatus (Maybe RecorderStatus)
- crsLastErrorMessage :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsName :: Lens' ConfigurationRecorderStatus (Maybe Text)
- crsLastStartTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime)
- data DeliveryChannel
- deliveryChannel :: DeliveryChannel
- dcS3KeyPrefix :: Lens' DeliveryChannel (Maybe Text)
- dcSnsTopicARN :: Lens' DeliveryChannel (Maybe Text)
- dcName :: Lens' DeliveryChannel (Maybe Text)
- dcConfigSnapshotDeliveryProperties :: Lens' DeliveryChannel (Maybe ConfigSnapshotDeliveryProperties)
- dcS3BucketName :: Lens' DeliveryChannel (Maybe Text)
- data DeliveryChannelStatus
- deliveryChannelStatus :: DeliveryChannelStatus
- dcsConfigSnapshotDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo)
- dcsConfigStreamDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigStreamDeliveryInfo)
- dcsConfigHistoryDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo)
- dcsName :: Lens' DeliveryChannelStatus (Maybe Text)
- data Evaluation
- evaluation :: Text -> Text -> ComplianceType -> UTCTime -> Evaluation
- eAnnotation :: Lens' Evaluation (Maybe Text)
- eComplianceResourceType :: Lens' Evaluation Text
- eComplianceResourceId :: Lens' Evaluation Text
- eComplianceType :: Lens' Evaluation ComplianceType
- eOrderingTimestamp :: Lens' Evaluation UTCTime
- data EvaluationResult
- evaluationResult :: EvaluationResult
- erEvaluationResultIdentifier :: Lens' EvaluationResult (Maybe EvaluationResultIdentifier)
- erAnnotation :: Lens' EvaluationResult (Maybe Text)
- erConfigRuleInvokedTime :: Lens' EvaluationResult (Maybe UTCTime)
- erResultRecordedTime :: Lens' EvaluationResult (Maybe UTCTime)
- erResultToken :: Lens' EvaluationResult (Maybe Text)
- erComplianceType :: Lens' EvaluationResult (Maybe ComplianceType)
- data EvaluationResultIdentifier
- evaluationResultIdentifier :: EvaluationResultIdentifier
- eriEvaluationResultQualifier :: Lens' EvaluationResultIdentifier (Maybe EvaluationResultQualifier)
- eriOrderingTimestamp :: Lens' EvaluationResultIdentifier (Maybe UTCTime)
- data EvaluationResultQualifier
- evaluationResultQualifier :: EvaluationResultQualifier
- erqResourceId :: Lens' EvaluationResultQualifier (Maybe Text)
- erqResourceType :: Lens' EvaluationResultQualifier (Maybe Text)
- erqConfigRuleName :: Lens' EvaluationResultQualifier (Maybe Text)
- data OrganizationAggregationSource
- organizationAggregationSource :: Text -> OrganizationAggregationSource
- oasAWSRegions :: Lens' OrganizationAggregationSource (Maybe (NonEmpty Text))
- oasAllAWSRegions :: Lens' OrganizationAggregationSource (Maybe Bool)
- oasRoleARN :: Lens' OrganizationAggregationSource Text
- data PendingAggregationRequest
- pendingAggregationRequest :: PendingAggregationRequest
- parRequesterAccountId :: Lens' PendingAggregationRequest (Maybe Text)
- parRequesterAWSRegion :: Lens' PendingAggregationRequest (Maybe Text)
- data RecordingGroup
- recordingGroup :: RecordingGroup
- rgAllSupported :: Lens' RecordingGroup (Maybe Bool)
- rgIncludeGlobalResourceTypes :: Lens' RecordingGroup (Maybe Bool)
- rgResourceTypes :: Lens' RecordingGroup [ResourceType]
- data Relationship
- relationship :: Relationship
- rResourceId :: Lens' Relationship (Maybe Text)
- rResourceType :: Lens' Relationship (Maybe ResourceType)
- rResourceName :: Lens' Relationship (Maybe Text)
- rRelationshipName :: Lens' Relationship (Maybe Text)
- data ResourceCount
- resourceCount :: ResourceCount
- rcResourceType :: Lens' ResourceCount (Maybe ResourceType)
- rcCount :: Lens' ResourceCount (Maybe Integer)
- data ResourceIdentifier
- resourceIdentifier :: ResourceIdentifier
- riResourceId :: Lens' ResourceIdentifier (Maybe Text)
- riResourceType :: Lens' ResourceIdentifier (Maybe ResourceType)
- riResourceName :: Lens' ResourceIdentifier (Maybe Text)
- riResourceDeletionTime :: Lens' ResourceIdentifier (Maybe UTCTime)
- data ResourceKey
- resourceKey :: ResourceType -> Text -> ResourceKey
- rkResourceType :: Lens' ResourceKey ResourceType
- rkResourceId :: Lens' ResourceKey Text
- data Scope
- scope :: Scope
- sComplianceResourceTypes :: Lens' Scope [Text]
- sComplianceResourceId :: Lens' Scope (Maybe Text)
- sTagValue :: Lens' Scope (Maybe Text)
- sTagKey :: Lens' Scope (Maybe Text)
- data Source
- source :: Owner -> Text -> Source
- sSourceDetails :: Lens' Source [SourceDetail]
- sOwner :: Lens' Source Owner
- sSourceIdentifier :: Lens' Source Text
- data SourceDetail
- sourceDetail :: SourceDetail
- sdMessageType :: Lens' SourceDetail (Maybe MessageType)
- sdMaximumExecutionFrequency :: Lens' SourceDetail (Maybe MaximumExecutionFrequency)
- sdEventSource :: Lens' SourceDetail (Maybe EventSource)
Service Configuration
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by Config
.
InvalidTimeRangeException
_InvalidTimeRangeException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified time range is not valid. The earlier time is not chronologically before the later time.
InvalidSNSTopicARNException
_InvalidSNSTopicARNException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon SNS topic does not exist.
InvalidRecordingGroupException
_InvalidRecordingGroupException :: AsError a => Getting (First ServiceError) a ServiceError Source #
AWS Config throws an exception if the recording group does not contain a valid list of resource types. Invalid values might also be incorrectly formatted.
NoAvailableOrganizationException
_NoAvailableOrganizationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Organization does is no longer available.
ValidationException
_ValidationException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The requested action is not valid.
OrganizationAccessDeniedException
_OrganizationAccessDeniedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
No permission to call the EnableAWSServiceAccess API.
NoSuchConfigurationAggregatorException
_NoSuchConfigurationAggregatorException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a configuration aggregator that does not exist.
InvalidRoleException
_InvalidRoleException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have provided a null or empty role ARN.
LastDeliveryChannelDeleteFailedException
_LastDeliveryChannelDeleteFailedException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You cannot delete the delivery channel you specified because the configuration recorder is running.
InvalidLimitException
_InvalidLimitException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified limit is outside the allowable range.
InvalidDeliveryChannelNameException
_InvalidDeliveryChannelNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified delivery channel name is not valid.
InvalidParameterValueException
_InvalidParameterValueException :: AsError a => Getting (First ServiceError) a ServiceError Source #
One or more of the specified parameters are invalid. Verify that your parameters are valid and try again.
InvalidResultTokenException
_InvalidResultTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified ResultToken
is invalid.
NoSuchDeliveryChannelException
_NoSuchDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a delivery channel that does not exist.
NoSuchConfigRuleException
_NoSuchConfigRuleException :: AsError a => Getting (First ServiceError) a ServiceError Source #
One or more AWS Config rules in the request are invalid. Verify that the rule names are correct and try again.
OrganizationAllFeaturesNotEnabledException
_OrganizationAllFeaturesNotEnabledException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The configuration aggregator cannot be created because organization does not have all features enabled.
InsufficientPermissionsException
_InsufficientPermissionsException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Indicates one of the following errors:
- The rule cannot be created because the IAM role assigned to AWS Config lacks permissions to perform the config:Put* action.
- The AWS Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
ResourceNotDiscoveredException
_ResourceNotDiscoveredException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a resource that is either unknown or has not been discovered.
InvalidNextTokenException
_InvalidNextTokenException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified next token is invalid. Specify the nextToken
string that was returned in the previous response to get the next page of results.
MaxNumberOfConfigRulesExceededException
_MaxNumberOfConfigRulesExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Failed to add the AWS Config rule because the account already contains the maximum number of 50 rules. Consider deleting any deactivated rules before you add new rules.
NoAvailableConfigurationRecorderException
_NoAvailableConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There are no configuration recorders available to provide the role needed to describe your resources. Create a configuration recorder.
NoSuchBucketException
_NoSuchBucketException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon S3 bucket does not exist.
NoAvailableDeliveryChannelException
_NoAvailableDeliveryChannelException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There is no delivery channel available to record configurations.
InvalidConfigurationRecorderNameException
_InvalidConfigurationRecorderNameException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have provided a configuration recorder name that is not valid.
NoRunningConfigurationRecorderException
_NoRunningConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
There is no configuration recorder running.
MaxNumberOfConfigurationRecordersExceededException
_MaxNumberOfConfigurationRecordersExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have reached the limit of the number of recorders you can create.
InsufficientDeliveryPolicyException
_InsufficientDeliveryPolicyException :: AsError a => Getting (First ServiceError) a ServiceError Source #
Your Amazon S3 bucket policy does not permit AWS Config to write to it.
MaxNumberOfDeliveryChannelsExceededException
_MaxNumberOfDeliveryChannelsExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have reached the limit of the number of delivery channels you can create.
NoSuchConfigurationRecorderException
_NoSuchConfigurationRecorderException :: AsError a => Getting (First ServiceError) a ServiceError Source #
You have specified a configuration recorder that does not exist.
InvalidS3KeyPrefixException
_InvalidS3KeyPrefixException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The specified Amazon S3 key prefix is not valid.
LimitExceededException
_LimitExceededException :: AsError a => Getting (First ServiceError) a ServiceError Source #
This exception is thrown if an evaluation is in progress or if you call the StartConfigRulesEvaluation
API more than once per minute.
ResourceInUseException
_ResourceInUseException :: AsError a => Getting (First ServiceError) a ServiceError Source #
The rule is currently being deleted or the rule is deleting your evaluation results. Try your request again later.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait
specification is fulfilled. The Wait
specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects
operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager
instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
DescribePendingAggregationRequests
GetResourceConfigHistory (Paginated)
DescribeConfigurationAggregators
DescribeComplianceByConfigRule (Paginated)
StopConfigurationRecorder
GetAggregateConfigRuleComplianceSummary
BatchGetResourceConfig
DescribeConfigRules (Paginated)
DescribeAggregateComplianceByConfigRules
DeleteEvaluationResults
PutConfigRule
DeleteConfigRule
GetComplianceDetailsByResource (Paginated)
DeletePendingAggregationRequest
DeliverConfigSnapshot
DescribeConfigRuleEvaluationStatus
GetDiscoveredResourceCounts
StartConfigRulesEvaluation
DescribeComplianceByResource (Paginated)
PutEvaluations
DescribeConfigurationRecorders
GetAggregateComplianceDetailsByConfigRule
StartConfigurationRecorder
GetComplianceSummaryByConfigRule
PutConfigurationAggregator
DeleteConfigurationAggregator
DescribeConfigurationRecorderStatus
PutConfigurationRecorder
DeleteConfigurationRecorder
GetComplianceSummaryByResourceType
DescribeDeliveryChannelStatus
PutDeliveryChannel
GetComplianceDetailsByConfigRule (Paginated)
DeleteAggregationAuthorization
DeleteDeliveryChannel
PutAggregationAuthorization
DescribeConfigurationAggregatorSourcesStatus
ListDiscoveredResources (Paginated)
DescribeDeliveryChannels
DescribeAggregationAuthorizations
Types
AggregatedSourceStatusType
data AggregatedSourceStatusType Source #
AggregatedSourceType
data AggregatedSourceType Source #
ChronologicalOrder
data ChronologicalOrder Source #
ComplianceType
data ComplianceType Source #
ConfigRuleComplianceSummaryGroupKey
data ConfigRuleComplianceSummaryGroupKey Source #
ConfigRuleState
data ConfigRuleState Source #
ConfigurationItemStatus
data ConfigurationItemStatus Source #
DeliveryStatus
data DeliveryStatus Source #
EventSource
data EventSource Source #
MaximumExecutionFrequency
data MaximumExecutionFrequency Source #
MessageType
data MessageType Source #
ConfigurationItemChangeNotification | |
ConfigurationSnapshotDeliveryCompleted | |
OversizedConfigurationItemChangeNotification | |
ScheduledNotification |
Owner
RecorderStatus
data RecorderStatus Source #
ResourceType
data ResourceType Source #
AccountAggregationSource
data AccountAggregationSource Source #
A collection of accounts and regions.
See: accountAggregationSource
smart constructor.
accountAggregationSource Source #
Creates a value of AccountAggregationSource
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aasAWSRegions
- The source regions being aggregated.aasAllAWSRegions
- If true, aggreagate existing AWS Config regions and future regions.aasAccountIds
- The 12-digit account ID of the account being aggregated.
aasAWSRegions :: Lens' AccountAggregationSource (Maybe (NonEmpty Text)) Source #
The source regions being aggregated.
aasAllAWSRegions :: Lens' AccountAggregationSource (Maybe Bool) Source #
If true, aggreagate existing AWS Config regions and future regions.
aasAccountIds :: Lens' AccountAggregationSource (NonEmpty Text) Source #
The 12-digit account ID of the account being aggregated.
AggregateComplianceByConfigRule
data AggregateComplianceByConfigRule Source #
Indicates whether an AWS Config rule is compliant based on account ID, region, compliance, and rule name.
A rule is compliant if all of the resources that the rule evaluated comply with it. It is noncompliant if any of these resources do not comply.
See: aggregateComplianceByConfigRule
smart constructor.
aggregateComplianceByConfigRule :: AggregateComplianceByConfigRule Source #
Creates a value of AggregateComplianceByConfigRule
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
acbcrCompliance
- Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.acbcrConfigRuleName
- The name of the AWS Config rule.acbcrAccountId
- The 12-digit account ID of the source account.acbcrAWSRegion
- The source region from where the data is aggregated.
acbcrCompliance :: Lens' AggregateComplianceByConfigRule (Maybe Compliance) Source #
Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.
acbcrConfigRuleName :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The name of the AWS Config rule.
acbcrAccountId :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The 12-digit account ID of the source account.
acbcrAWSRegion :: Lens' AggregateComplianceByConfigRule (Maybe Text) Source #
The source region from where the data is aggregated.
AggregateComplianceCount
data AggregateComplianceCount Source #
Returns the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator.
See: aggregateComplianceCount
smart constructor.
aggregateComplianceCount :: AggregateComplianceCount Source #
Creates a value of AggregateComplianceCount
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
accGroupName
- The 12-digit account ID or region based on the GroupByKey value.accComplianceSummary
- The number of compliant and noncompliant AWS Config rules.
accGroupName :: Lens' AggregateComplianceCount (Maybe Text) Source #
The 12-digit account ID or region based on the GroupByKey value.
accComplianceSummary :: Lens' AggregateComplianceCount (Maybe ComplianceSummary) Source #
The number of compliant and noncompliant AWS Config rules.
AggregateEvaluationResult
data AggregateEvaluationResult Source #
The details of an AWS Config evaluation for an account ID and region in an aggregator. Provides the AWS resource that was evaluated, the compliance of the resource, related time stamps, and supplementary information.
See: aggregateEvaluationResult
smart constructor.
aggregateEvaluationResult :: AggregateEvaluationResult Source #
Creates a value of AggregateEvaluationResult
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aerEvaluationResultIdentifier
- Uniquely identifies the evaluation result.aerAnnotation
- Supplementary information about how the agrregate evaluation determined the compliance.aerConfigRuleInvokedTime
- The time when the AWS Config rule evaluated the AWS resource.aerResultRecordedTime
- The time when AWS Config recorded the aggregate evaluation result.aerAccountId
- The 12-digit account ID of the source account.aerComplianceType
- The resource compliance status. For theAggregationEvaluationResult
data type, AWS Config supports only theCOMPLIANT
andNON_COMPLIANT
. AWS Config does not support theNOT_APPLICABLE
andINSUFFICIENT_DATA
value.aerAWSRegion
- The source region from where the data is aggregated.
aerEvaluationResultIdentifier :: Lens' AggregateEvaluationResult (Maybe EvaluationResultIdentifier) Source #
Uniquely identifies the evaluation result.
aerAnnotation :: Lens' AggregateEvaluationResult (Maybe Text) Source #
Supplementary information about how the agrregate evaluation determined the compliance.
aerConfigRuleInvokedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime) Source #
The time when the AWS Config rule evaluated the AWS resource.
aerResultRecordedTime :: Lens' AggregateEvaluationResult (Maybe UTCTime) Source #
The time when AWS Config recorded the aggregate evaluation result.
aerAccountId :: Lens' AggregateEvaluationResult (Maybe Text) Source #
The 12-digit account ID of the source account.
aerComplianceType :: Lens' AggregateEvaluationResult (Maybe ComplianceType) Source #
The resource compliance status. For the AggregationEvaluationResult
data type, AWS Config supports only the COMPLIANT
and NON_COMPLIANT
. AWS Config does not support the NOT_APPLICABLE
and INSUFFICIENT_DATA
value.
aerAWSRegion :: Lens' AggregateEvaluationResult (Maybe Text) Source #
The source region from where the data is aggregated.
AggregatedSourceStatus
data AggregatedSourceStatus Source #
The current sync status between the source and the aggregator account.
See: aggregatedSourceStatus
smart constructor.
aggregatedSourceStatus :: AggregatedSourceStatus Source #
Creates a value of AggregatedSourceStatus
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
assLastErrorCode
- The error code that AWS Config returned when the source account aggregation last failed.assLastUpdateStatus
- Filters the last updated status type. * Valid value FAILED indicates errors while moving data. * Valid value SUCCEEDED indicates the data was successfully moved. * Valid value OUTDATED indicates the data is not the most recent.assSourceType
- The source account or an organization.assSourceId
- The source account ID or an organization.assLastErrorMessage
- The message indicating that the source account aggregation failed due to an error.assAWSRegion
- The region authorized to collect aggregated data.assLastUpdateTime
- The time of the last update.
assLastErrorCode :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The error code that AWS Config returned when the source account aggregation last failed.
assLastUpdateStatus :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceStatusType) Source #
Filters the last updated status type. * Valid value FAILED indicates errors while moving data. * Valid value SUCCEEDED indicates the data was successfully moved. * Valid value OUTDATED indicates the data is not the most recent.
assSourceType :: Lens' AggregatedSourceStatus (Maybe AggregatedSourceType) Source #
The source account or an organization.
assSourceId :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The source account ID or an organization.
assLastErrorMessage :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The message indicating that the source account aggregation failed due to an error.
assAWSRegion :: Lens' AggregatedSourceStatus (Maybe Text) Source #
The region authorized to collect aggregated data.
assLastUpdateTime :: Lens' AggregatedSourceStatus (Maybe UTCTime) Source #
The time of the last update.
AggregationAuthorization
data AggregationAuthorization Source #
An object that represents the authorizations granted to aggregator accounts and regions.
See: aggregationAuthorization
smart constructor.
aggregationAuthorization :: AggregationAuthorization Source #
Creates a value of AggregationAuthorization
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
aaCreationTime
- The time stamp when the aggregation authorization was created.aaAuthorizedAWSRegion
- The region authorized to collect aggregated data.aaAggregationAuthorizationARN
- The Amazon Resource Name (ARN) of the aggregation object.aaAuthorizedAccountId
- The 12-digit account ID of the account authorized to aggregate data.
aaCreationTime :: Lens' AggregationAuthorization (Maybe UTCTime) Source #
The time stamp when the aggregation authorization was created.
aaAuthorizedAWSRegion :: Lens' AggregationAuthorization (Maybe Text) Source #
The region authorized to collect aggregated data.
aaAggregationAuthorizationARN :: Lens' AggregationAuthorization (Maybe Text) Source #
The Amazon Resource Name (ARN) of the aggregation object.
aaAuthorizedAccountId :: Lens' AggregationAuthorization (Maybe Text) Source #
The 12-digit account ID of the account authorized to aggregate data.
BaseConfigurationItem
data BaseConfigurationItem Source #
The detailed configuration of a specified resource.
See: baseConfigurationItem
smart constructor.
baseConfigurationItem :: BaseConfigurationItem Source #
Creates a value of BaseConfigurationItem
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
bciResourceId
- The ID of the resource (for example., sg-xxxxxx).bciResourceType
- The type of AWS resource.bciConfigurationStateId
- An identifier that indicates the ordering of the configuration items of a resource.bciArn
- The Amazon Resource Name (ARN) of the resource.bciResourceName
- The custom name of the resource, if available.bciResourceCreationTime
- The time stamp when the resource was created.bciConfigurationItemStatus
- The configuration item status.bciConfigurationItemCaptureTime
- The time when the configuration recording was initiated.bciAccountId
- The 12 digit AWS account ID associated with the resource.bciSupplementaryConfiguration
- Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.bciAvailabilityZone
- The Availability Zone associated with the resource.bciVersion
- The version number of the resource configuration.bciAwsRegion
- The region where the resource resides.bciConfiguration
- The description of the resource configuration.
bciResourceId :: Lens' BaseConfigurationItem (Maybe Text) Source #
The ID of the resource (for example., sg-xxxxxx).
bciResourceType :: Lens' BaseConfigurationItem (Maybe ResourceType) Source #
The type of AWS resource.
bciConfigurationStateId :: Lens' BaseConfigurationItem (Maybe Text) Source #
An identifier that indicates the ordering of the configuration items of a resource.
bciArn :: Lens' BaseConfigurationItem (Maybe Text) Source #
The Amazon Resource Name (ARN) of the resource.
bciResourceName :: Lens' BaseConfigurationItem (Maybe Text) Source #
The custom name of the resource, if available.
bciResourceCreationTime :: Lens' BaseConfigurationItem (Maybe UTCTime) Source #
The time stamp when the resource was created.
bciConfigurationItemStatus :: Lens' BaseConfigurationItem (Maybe ConfigurationItemStatus) Source #
The configuration item status.
bciConfigurationItemCaptureTime :: Lens' BaseConfigurationItem (Maybe UTCTime) Source #
The time when the configuration recording was initiated.
bciAccountId :: Lens' BaseConfigurationItem (Maybe Text) Source #
The 12 digit AWS account ID associated with the resource.
bciSupplementaryConfiguration :: Lens' BaseConfigurationItem (HashMap Text Text) Source #
Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.
bciAvailabilityZone :: Lens' BaseConfigurationItem (Maybe Text) Source #
The Availability Zone associated with the resource.
bciVersion :: Lens' BaseConfigurationItem (Maybe Text) Source #
The version number of the resource configuration.
bciAwsRegion :: Lens' BaseConfigurationItem (Maybe Text) Source #
The region where the resource resides.
bciConfiguration :: Lens' BaseConfigurationItem (Maybe Text) Source #
The description of the resource configuration.
Compliance
data Compliance Source #
Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.
See: compliance
smart constructor.
compliance :: Compliance Source #
Creates a value of Compliance
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cComplianceContributorCount
- The number of AWS resources or AWS Config rules that cause a result ofNON_COMPLIANT
, up to a maximum number.cComplianceType
- Indicates whether an AWS resource or AWS Config rule is compliant. A resource is compliant if it complies with all of the AWS Config rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules. A rule is compliant if all of the resources that the rule evaluates comply with it. A rule is noncompliant if any of these resources do not comply. AWS Config returns theINSUFFICIENT_DATA
value when no evaluation results are available for the AWS resource or AWS Config rule. For theCompliance
data type, AWS Config supports onlyCOMPLIANT
,NON_COMPLIANT
, andINSUFFICIENT_DATA
values. AWS Config does not support theNOT_APPLICABLE
value for theCompliance
data type.
cComplianceContributorCount :: Lens' Compliance (Maybe ComplianceContributorCount) Source #
The number of AWS resources or AWS Config rules that cause a result of NON_COMPLIANT
, up to a maximum number.
cComplianceType :: Lens' Compliance (Maybe ComplianceType) Source #
Indicates whether an AWS resource or AWS Config rule is compliant. A resource is compliant if it complies with all of the AWS Config rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules. A rule is compliant if all of the resources that the rule evaluates comply with it. A rule is noncompliant if any of these resources do not comply. AWS Config returns the INSUFFICIENT_DATA
value when no evaluation results are available for the AWS resource or AWS Config rule. For the Compliance
data type, AWS Config supports only COMPLIANT
, NON_COMPLIANT
, and INSUFFICIENT_DATA
values. AWS Config does not support the NOT_APPLICABLE
value for the Compliance
data type.
ComplianceByConfigRule
data ComplianceByConfigRule Source #
Indicates whether an AWS Config rule is compliant. A rule is compliant if all of the resources that the rule evaluated comply with it. A rule is noncompliant if any of these resources do not comply.
See: complianceByConfigRule
smart constructor.
complianceByConfigRule :: ComplianceByConfigRule Source #
Creates a value of ComplianceByConfigRule
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cbcrCompliance
- Indicates whether the AWS Config rule is compliant.cbcrConfigRuleName
- The name of the AWS Config rule.
cbcrCompliance :: Lens' ComplianceByConfigRule (Maybe Compliance) Source #
Indicates whether the AWS Config rule is compliant.
cbcrConfigRuleName :: Lens' ComplianceByConfigRule (Maybe Text) Source #
The name of the AWS Config rule.
ComplianceByResource
data ComplianceByResource Source #
Indicates whether an AWS resource that is evaluated according to one or more AWS Config rules is compliant. A resource is compliant if it complies with all of the rules that evaluate it. A resource is noncompliant if it does not comply with one or more of these rules.
See: complianceByResource
smart constructor.
complianceByResource :: ComplianceByResource Source #
Creates a value of ComplianceByResource
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cbrResourceId
- The ID of the AWS resource that was evaluated.cbrResourceType
- The type of the AWS resource that was evaluated.cbrCompliance
- Indicates whether the AWS resource complies with all of the AWS Config rules that evaluated it.
cbrResourceId :: Lens' ComplianceByResource (Maybe Text) Source #
The ID of the AWS resource that was evaluated.
cbrResourceType :: Lens' ComplianceByResource (Maybe Text) Source #
The type of the AWS resource that was evaluated.
cbrCompliance :: Lens' ComplianceByResource (Maybe Compliance) Source #
Indicates whether the AWS resource complies with all of the AWS Config rules that evaluated it.
ComplianceContributorCount
data ComplianceContributorCount Source #
The number of AWS resources or AWS Config rules responsible for the current compliance of the item, up to a maximum number.
See: complianceContributorCount
smart constructor.
complianceContributorCount :: ComplianceContributorCount Source #
Creates a value of ComplianceContributorCount
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cccCappedCount
- The number of AWS resources or AWS Config rules responsible for the current compliance of the item.cccCapExceeded
- Indicates whether the maximum count is reached.
cccCappedCount :: Lens' ComplianceContributorCount (Maybe Int) Source #
The number of AWS resources or AWS Config rules responsible for the current compliance of the item.
cccCapExceeded :: Lens' ComplianceContributorCount (Maybe Bool) Source #
Indicates whether the maximum count is reached.
ComplianceSummary
data ComplianceSummary Source #
The number of AWS Config rules or AWS resources that are compliant and noncompliant.
See: complianceSummary
smart constructor.
complianceSummary :: ComplianceSummary Source #
Creates a value of ComplianceSummary
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csComplianceSummaryTimestamp
- The time that AWS Config created the compliance summary.csCompliantResourceCount
- The number of AWS Config rules or AWS resources that are compliant, up to a maximum of 25 for rules and 100 for resources.csNonCompliantResourceCount
- The number of AWS Config rules or AWS resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.
csComplianceSummaryTimestamp :: Lens' ComplianceSummary (Maybe UTCTime) Source #
The time that AWS Config created the compliance summary.
csCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source #
The number of AWS Config rules or AWS resources that are compliant, up to a maximum of 25 for rules and 100 for resources.
csNonCompliantResourceCount :: Lens' ComplianceSummary (Maybe ComplianceContributorCount) Source #
The number of AWS Config rules or AWS resources that are noncompliant, up to a maximum of 25 for rules and 100 for resources.
ComplianceSummaryByResourceType
data ComplianceSummaryByResourceType Source #
The number of AWS resources of a specific type that are compliant or noncompliant, up to a maximum of 100 for each.
See: complianceSummaryByResourceType
smart constructor.
complianceSummaryByResourceType :: ComplianceSummaryByResourceType Source #
Creates a value of ComplianceSummaryByResourceType
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csbrtResourceType
- The type of AWS resource.csbrtComplianceSummary
- The number of AWS resources that are compliant or noncompliant, up to a maximum of 100 for each.
csbrtResourceType :: Lens' ComplianceSummaryByResourceType (Maybe Text) Source #
The type of AWS resource.
csbrtComplianceSummary :: Lens' ComplianceSummaryByResourceType (Maybe ComplianceSummary) Source #
The number of AWS resources that are compliant or noncompliant, up to a maximum of 100 for each.
ConfigExportDeliveryInfo
data ConfigExportDeliveryInfo Source #
Provides status of the delivery of the snapshot or the configuration history to the specified Amazon S3 bucket. Also provides the status of notifications about the Amazon S3 delivery to the specified Amazon SNS topic.
See: configExportDeliveryInfo
smart constructor.
configExportDeliveryInfo :: ConfigExportDeliveryInfo Source #
Creates a value of ConfigExportDeliveryInfo
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cediLastErrorCode
- The error code from the last attempted delivery.cediLastAttemptTime
- The time of the last attempted delivery.cediLastSuccessfulTime
- The time of the last successful delivery.cediLastStatus
- Status of the last attempted delivery.cediLastErrorMessage
- The error message from the last attempted delivery.cediNextDeliveryTime
- The time that the next delivery occurs.
cediLastErrorCode :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source #
The error code from the last attempted delivery.
cediLastAttemptTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time of the last attempted delivery.
cediLastSuccessfulTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time of the last successful delivery.
cediLastStatus :: Lens' ConfigExportDeliveryInfo (Maybe DeliveryStatus) Source #
Status of the last attempted delivery.
cediLastErrorMessage :: Lens' ConfigExportDeliveryInfo (Maybe Text) Source #
The error message from the last attempted delivery.
cediNextDeliveryTime :: Lens' ConfigExportDeliveryInfo (Maybe UTCTime) Source #
The time that the next delivery occurs.
ConfigRule
data ConfigRule Source #
An AWS Config rule represents an AWS Lambda function that you create for a custom rule or a predefined function for an AWS managed rule. The function evaluates configuration items to assess whether your AWS resources comply with your desired configurations. This function can run when AWS Config detects a configuration change to an AWS resource and at a periodic frequency that you choose (for example, every 24 hours).
For more information about developing and using AWS Config rules, see Evaluating AWS Resource Configurations with AWS Config in the AWS Config Developer Guide .
See: configRule
smart constructor.
:: Source | |
-> ConfigRule |
Creates a value of ConfigRule
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crInputParameters
- A string, in JSON format, that is passed to the AWS Config rule Lambda function.crConfigRuleName
- The name that you assign to the AWS Config rule. The name is required if you are adding a new rule.crMaximumExecutionFrequency
- The maximum frequency with which AWS Config runs evaluations for a rule. You can specify a value forMaximumExecutionFrequency
when: * You are using an AWS managed rule that is triggered at a periodic frequency. * Your custom rule is triggered when AWS Config delivers the configuration snapshot. For more information, seeConfigSnapshotDeliveryProperties
.crConfigRuleId
- The ID of the AWS Config rule.crScope
- Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.crConfigRuleState
- Indicates whether the AWS Config rule is active or is currently being deleted by AWS Config. It can also indicate the evaluation status for the AWS Config rule. AWS Config sets the state of the rule toEVALUATING
temporarily after you use theStartConfigRulesEvaluation
request to evaluate your resources against the AWS Config rule. AWS Config sets the state of the rule toDELETING_RESULTS
temporarily after you use theDeleteEvaluationResults
request to delete the current evaluation results for the AWS Config rule. AWS Config temporarily sets the state of a rule toDELETING
after you use theDeleteConfigRule
request to delete the rule. After AWS Config deletes the rule, the rule and all of its evaluations are erased and are no longer available.crDescription
- The description that you provide for the AWS Config rule.crConfigRuleARN
- The Amazon Resource Name (ARN) of the AWS Config rule.crSource
- Provides the rule owner (AWS or customer), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
crInputParameters :: Lens' ConfigRule (Maybe Text) Source #
A string, in JSON format, that is passed to the AWS Config rule Lambda function.
crConfigRuleName :: Lens' ConfigRule (Maybe Text) Source #
The name that you assign to the AWS Config rule. The name is required if you are adding a new rule.
crMaximumExecutionFrequency :: Lens' ConfigRule (Maybe MaximumExecutionFrequency) Source #
The maximum frequency with which AWS Config runs evaluations for a rule. You can specify a value for MaximumExecutionFrequency
when: * You are using an AWS managed rule that is triggered at a periodic frequency. * Your custom rule is triggered when AWS Config delivers the configuration snapshot. For more information, see ConfigSnapshotDeliveryProperties
.
crConfigRuleId :: Lens' ConfigRule (Maybe Text) Source #
The ID of the AWS Config rule.
crScope :: Lens' ConfigRule (Maybe Scope) Source #
Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.
crConfigRuleState :: Lens' ConfigRule (Maybe ConfigRuleState) Source #
Indicates whether the AWS Config rule is active or is currently being deleted by AWS Config. It can also indicate the evaluation status for the AWS Config rule. AWS Config sets the state of the rule to EVALUATING
temporarily after you use the StartConfigRulesEvaluation
request to evaluate your resources against the AWS Config rule. AWS Config sets the state of the rule to DELETING_RESULTS
temporarily after you use the DeleteEvaluationResults
request to delete the current evaluation results for the AWS Config rule. AWS Config temporarily sets the state of a rule to DELETING
after you use the DeleteConfigRule
request to delete the rule. After AWS Config deletes the rule, the rule and all of its evaluations are erased and are no longer available.
crDescription :: Lens' ConfigRule (Maybe Text) Source #
The description that you provide for the AWS Config rule.
crConfigRuleARN :: Lens' ConfigRule (Maybe Text) Source #
The Amazon Resource Name (ARN) of the AWS Config rule.
crSource :: Lens' ConfigRule Source Source #
Provides the rule owner (AWS or customer), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
ConfigRuleComplianceFilters
data ConfigRuleComplianceFilters Source #
Filters the compliance results based on account ID, region, compliance type, and rule name.
See: configRuleComplianceFilters
smart constructor.
configRuleComplianceFilters :: ConfigRuleComplianceFilters Source #
Creates a value of ConfigRuleComplianceFilters
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crcfConfigRuleName
- The name of the AWS Config rule.crcfAccountId
- The 12-digit account ID of the source account.crcfComplianceType
- The rule compliance status. For theConfigRuleComplianceFilters
data type, AWS Config supports onlyCOMPLIANT
andNON_COMPLIANT
. AWS Config does not support theNOT_APPLICABLE
and theINSUFFICIENT_DATA
values.crcfAWSRegion
- The source region where the data is aggregated.
crcfConfigRuleName :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The name of the AWS Config rule.
crcfAccountId :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The 12-digit account ID of the source account.
crcfComplianceType :: Lens' ConfigRuleComplianceFilters (Maybe ComplianceType) Source #
The rule compliance status. For the ConfigRuleComplianceFilters
data type, AWS Config supports only COMPLIANT
and NON_COMPLIANT
. AWS Config does not support the NOT_APPLICABLE
and the INSUFFICIENT_DATA
values.
crcfAWSRegion :: Lens' ConfigRuleComplianceFilters (Maybe Text) Source #
The source region where the data is aggregated.
ConfigRuleComplianceSummaryFilters
data ConfigRuleComplianceSummaryFilters Source #
Filters the results based on the account IDs and regions.
See: configRuleComplianceSummaryFilters
smart constructor.
configRuleComplianceSummaryFilters :: ConfigRuleComplianceSummaryFilters Source #
Creates a value of ConfigRuleComplianceSummaryFilters
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crcsfAccountId
- The 12-digit account ID of the source account.crcsfAWSRegion
- The source region where the data is aggregated.
crcsfAccountId :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text) Source #
The 12-digit account ID of the source account.
crcsfAWSRegion :: Lens' ConfigRuleComplianceSummaryFilters (Maybe Text) Source #
The source region where the data is aggregated.
ConfigRuleEvaluationStatus
data ConfigRuleEvaluationStatus Source #
Status information for your AWS managed Config rules. The status includes information such as the last time the rule ran, the last time it failed, and the related error for the last failure.
This action does not return status information about custom AWS Config rules.
See: configRuleEvaluationStatus
smart constructor.
configRuleEvaluationStatus :: ConfigRuleEvaluationStatus Source #
Creates a value of ConfigRuleEvaluationStatus
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
cresLastErrorCode
- The error code that AWS Config returned when the rule last failed.cresLastFailedEvaluationTime
- The time that AWS Config last failed to evaluate your AWS resources against the rule.cresFirstActivatedTime
- The time that you first activated the AWS Config rule.cresLastSuccessfulEvaluationTime
- The time that AWS Config last successfully evaluated your AWS resources against the rule.cresConfigRuleName
- The name of the AWS Config rule.cresLastErrorMessage
- The error message that AWS Config returned when the rule last failed.cresConfigRuleId
- The ID of the AWS Config rule.cresLastFailedInvocationTime
- The time that AWS Config last failed to invoke the AWS Config rule to evaluate your AWS resources.cresFirstEvaluationStarted
- Indicates whether AWS Config has evaluated your resources against the rule at least once. *true
- AWS Config has evaluated your AWS resources against the rule at least once. *false
- AWS Config has not once finished evaluating your AWS resources against the rule.cresLastSuccessfulInvocationTime
- The time that AWS Config last successfully invoked the AWS Config rule to evaluate your AWS resources.cresConfigRuleARN
- The Amazon Resource Name (ARN) of the AWS Config rule.
cresLastErrorCode :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The error code that AWS Config returned when the rule last failed.
cresLastFailedEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last failed to evaluate your AWS resources against the rule.
cresFirstActivatedTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that you first activated the AWS Config rule.
cresLastSuccessfulEvaluationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last successfully evaluated your AWS resources against the rule.
cresConfigRuleName :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The name of the AWS Config rule.
cresLastErrorMessage :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The error message that AWS Config returned when the rule last failed.
cresConfigRuleId :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The ID of the AWS Config rule.
cresLastFailedInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last failed to invoke the AWS Config rule to evaluate your AWS resources.
cresFirstEvaluationStarted :: Lens' ConfigRuleEvaluationStatus (Maybe Bool) Source #
Indicates whether AWS Config has evaluated your resources against the rule at least once. * true
- AWS Config has evaluated your AWS resources against the rule at least once. * false
- AWS Config has not once finished evaluating your AWS resources against the rule.
cresLastSuccessfulInvocationTime :: Lens' ConfigRuleEvaluationStatus (Maybe UTCTime) Source #
The time that AWS Config last successfully invoked the AWS Config rule to evaluate your AWS resources.
cresConfigRuleARN :: Lens' ConfigRuleEvaluationStatus (Maybe Text) Source #
The Amazon Resource Name (ARN) of the AWS Config rule.
ConfigSnapshotDeliveryProperties
data ConfigSnapshotDeliveryProperties Source #
Provides options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket in your delivery channel.
The frequency for a rule that triggers evaluations for your resources when AWS Config delivers the configuration snapshot is set by one of two values, depending on which is less frequent:
- The value for the
deliveryFrequency
parameter within the delivery channel configuration, which sets how often AWS Config delivers configuration snapshots. This value also sets how often AWS Config invokes evaluations for AWS Config rules. - The value for the
MaximumExecutionFrequency
parameter, which sets the maximum frequency with which AWS Config invokes evaluations for the rule. For more information, seeConfigRule
.
If the deliveryFrequency
value is less frequent than the MaximumExecutionFrequency
value for a rule, AWS Config invokes the rule only as often as the deliveryFrequency
value.
- For example, you want your rule to run evaluations when AWS Config delivers the configuration snapshot.
- You specify the
MaximumExecutionFrequency
value forSix_Hours
. - You then specify the delivery channel
deliveryFrequency
value forTwentyFour_Hours
. - Because the value for
deliveryFrequency
is less frequent thanMaximumExecutionFrequency
, AWS Config invokes evaluations for the rule every 24 hours.
You should set the MaximumExecutionFrequency
value to be at least as frequent as the deliveryFrequency
value. You can view the deliveryFrequency
value by using the DescribeDeliveryChannnels
action.
To update the deliveryFrequency
with which AWS Config delivers your configuration snapshots, use the PutDeliveryChannel
action.
See: configSnapshotDeliveryProperties
smart constructor.
configSnapshotDeliveryProperties :: ConfigSnapshotDeliveryProperties Source #
Creates a value of ConfigSnapshotDeliveryProperties
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csdpDeliveryFrequency
- The frequency with which AWS Config delivers configuration snapshots.
csdpDeliveryFrequency :: Lens' ConfigSnapshotDeliveryProperties (Maybe MaximumExecutionFrequency) Source #
The frequency with which AWS Config delivers configuration snapshots.
ConfigStreamDeliveryInfo
data ConfigStreamDeliveryInfo Source #
A list that contains the status of the delivery of the configuration stream notification to the Amazon SNS topic.
See: configStreamDeliveryInfo
smart constructor.
configStreamDeliveryInfo :: ConfigStreamDeliveryInfo Source #
Creates a value of ConfigStreamDeliveryInfo
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
csdiLastErrorCode
- The error code from the last attempted delivery.csdiLastStatusChangeTime
- The time from the last status change.csdiLastStatus
- Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for AWS Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable .csdiLastErrorMessage
- The error message from the last attempted delivery.
csdiLastErrorCode :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source #
The error code from the last attempted delivery.
csdiLastStatusChangeTime :: Lens' ConfigStreamDeliveryInfo (Maybe UTCTime) Source #
The time from the last status change.
csdiLastStatus :: Lens' ConfigStreamDeliveryInfo (Maybe DeliveryStatus) Source #
Status of the last attempted delivery. Note Providing an SNS topic on a DeliveryChannel for AWS Config is optional. If the SNS delivery is turned off, the last status will be Not_Applicable .
csdiLastErrorMessage :: Lens' ConfigStreamDeliveryInfo (Maybe Text) Source #
The error message from the last attempted delivery.
ConfigurationAggregator
data ConfigurationAggregator Source #
The details about the configuration aggregator, including information about source accounts, regions, and metadata of the aggregator.
See: configurationAggregator
smart constructor.
configurationAggregator :: ConfigurationAggregator Source #
Creates a value of ConfigurationAggregator
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
caConfigurationAggregatorARN
- The Amazon Resource Name (ARN) of the aggregator.caCreationTime
- The time stamp when the configuration aggregator was created.caOrganizationAggregationSource
- Provides an organization and list of regions to be aggregated.caLastUpdatedTime
- The time of the last update.caAccountAggregationSources
- Provides a list of source accounts and regions to be aggregated.caConfigurationAggregatorName
- The name of the aggregator.
caConfigurationAggregatorARN :: Lens' ConfigurationAggregator (Maybe Text) Source #
The Amazon Resource Name (ARN) of the aggregator.
caCreationTime :: Lens' ConfigurationAggregator (Maybe UTCTime) Source #
The time stamp when the configuration aggregator was created.
caOrganizationAggregationSource :: Lens' ConfigurationAggregator (Maybe OrganizationAggregationSource) Source #
Provides an organization and list of regions to be aggregated.
caLastUpdatedTime :: Lens' ConfigurationAggregator (Maybe UTCTime) Source #
The time of the last update.
caAccountAggregationSources :: Lens' ConfigurationAggregator [AccountAggregationSource] Source #
Provides a list of source accounts and regions to be aggregated.
caConfigurationAggregatorName :: Lens' ConfigurationAggregator (Maybe Text) Source #
The name of the aggregator.
ConfigurationItem
data ConfigurationItem Source #
A list that contains detailed configurations of a specified resource.
See: configurationItem
smart constructor.
configurationItem :: ConfigurationItem Source #
Creates a value of ConfigurationItem
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
ciResourceId
- The ID of the resource (for example,sg-xxxxxx
).ciResourceType
- The type of AWS resource.ciConfigurationStateId
- An identifier that indicates the ordering of the configuration items of a resource.ciArn
- The Amazon Resource Name (ARN) of the resource.ciResourceName
- The custom name of the resource, if available.ciResourceCreationTime
- The time stamp when the resource was created.ciConfigurationItemStatus
- The configuration item status.ciConfigurationItemCaptureTime
- The time when the configuration recording was initiated.ciAccountId
- The 12-digit AWS account ID associated with the resource.ciSupplementaryConfiguration
- Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for theconfiguration
parameter.ciAvailabilityZone
- The Availability Zone associated with the resource.ciRelationships
- A list of related AWS resources.ciVersion
- The version number of the resource configuration.ciAwsRegion
- The region where the resource resides.ciRelatedEvents
- A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is AWS CloudTrail . An empty field indicates that the current configuration was not initiated by any event.ciConfiguration
- The description of the resource configuration.ciConfigurationItemMD5Hash
- Unique MD5 hash that represents the configuration item's state. You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.ciTags
- A mapping of key value tags associated with the resource.
ciResourceId :: Lens' ConfigurationItem (Maybe Text) Source #
The ID of the resource (for example, sg-xxxxxx
).
ciResourceType :: Lens' ConfigurationItem (Maybe ResourceType) Source #
The type of AWS resource.
ciConfigurationStateId :: Lens' ConfigurationItem (Maybe Text) Source #
An identifier that indicates the ordering of the configuration items of a resource.
ciArn :: Lens' ConfigurationItem (Maybe Text) Source #
The Amazon Resource Name (ARN) of the resource.
ciResourceName :: Lens' ConfigurationItem (Maybe Text) Source #
The custom name of the resource, if available.
ciResourceCreationTime :: Lens' ConfigurationItem (Maybe UTCTime) Source #
The time stamp when the resource was created.
ciConfigurationItemStatus :: Lens' ConfigurationItem (Maybe ConfigurationItemStatus) Source #
The configuration item status.
ciConfigurationItemCaptureTime :: Lens' ConfigurationItem (Maybe UTCTime) Source #
The time when the configuration recording was initiated.
ciAccountId :: Lens' ConfigurationItem (Maybe Text) Source #
The 12-digit AWS account ID associated with the resource.
ciSupplementaryConfiguration :: Lens' ConfigurationItem (HashMap Text Text) Source #
Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration
parameter.
ciAvailabilityZone :: Lens' ConfigurationItem (Maybe Text) Source #
The Availability Zone associated with the resource.
ciRelationships :: Lens' ConfigurationItem [Relationship] Source #
A list of related AWS resources.
ciVersion :: Lens' ConfigurationItem (Maybe Text) Source #
The version number of the resource configuration.
ciAwsRegion :: Lens' ConfigurationItem (Maybe Text) Source #
The region where the resource resides.
ciRelatedEvents :: Lens' ConfigurationItem [Text] Source #
A list of CloudTrail event IDs. A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is AWS CloudTrail . An empty field indicates that the current configuration was not initiated by any event.
ciConfiguration :: Lens' ConfigurationItem (Maybe Text) Source #
The description of the resource configuration.
ciConfigurationItemMD5Hash :: Lens' ConfigurationItem (Maybe Text) Source #
Unique MD5 hash that represents the configuration item's state. You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.
ciTags :: Lens' ConfigurationItem (HashMap Text Text) Source #
A mapping of key value tags associated with the resource.
ConfigurationRecorder
data ConfigurationRecorder Source #
An object that represents the recording of configuration changes of an AWS resource.
See: configurationRecorder
smart constructor.
configurationRecorder :: ConfigurationRecorder Source #
Creates a value of ConfigurationRecorder
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crName
- The name of the recorder. By default, AWS Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.crRecordingGroup
- Specifies the types of AWS resources for which AWS Config records configuration changes.crRoleARN
- Amazon Resource Name (ARN) of the IAM role used to describe the AWS resources associated with the account.
crName :: Lens' ConfigurationRecorder (Maybe Text) Source #
The name of the recorder. By default, AWS Config automatically assigns the name "default" when creating the configuration recorder. You cannot change the assigned name.
crRecordingGroup :: Lens' ConfigurationRecorder (Maybe RecordingGroup) Source #
Specifies the types of AWS resources for which AWS Config records configuration changes.
crRoleARN :: Lens' ConfigurationRecorder (Maybe Text) Source #
Amazon Resource Name (ARN) of the IAM role used to describe the AWS resources associated with the account.
ConfigurationRecorderStatus
data ConfigurationRecorderStatus Source #
The current status of the configuration recorder.
See: configurationRecorderStatus
smart constructor.
configurationRecorderStatus :: ConfigurationRecorderStatus Source #
Creates a value of ConfigurationRecorderStatus
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
crsLastErrorCode
- The error code indicating that the recording failed.crsLastStopTime
- The time the recorder was last stopped.crsLastStatusChangeTime
- The time when the status was last changed.crsRecording
- Specifies whether or not the recorder is currently recording.crsLastStatus
- The last (previous) status of the recorder.crsLastErrorMessage
- The message indicating that the recording failed due to an error.crsName
- The name of the configuration recorder.crsLastStartTime
- The time the recorder was last started.
crsLastErrorCode :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The error code indicating that the recording failed.
crsLastStopTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time the recorder was last stopped.
crsLastStatusChangeTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time when the status was last changed.
crsRecording :: Lens' ConfigurationRecorderStatus (Maybe Bool) Source #
Specifies whether or not the recorder is currently recording.
crsLastStatus :: Lens' ConfigurationRecorderStatus (Maybe RecorderStatus) Source #
The last (previous) status of the recorder.
crsLastErrorMessage :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The message indicating that the recording failed due to an error.
crsName :: Lens' ConfigurationRecorderStatus (Maybe Text) Source #
The name of the configuration recorder.
crsLastStartTime :: Lens' ConfigurationRecorderStatus (Maybe UTCTime) Source #
The time the recorder was last started.
DeliveryChannel
data DeliveryChannel Source #
The channel through which AWS Config delivers notifications and updated configuration states.
See: deliveryChannel
smart constructor.
deliveryChannel :: DeliveryChannel Source #
Creates a value of DeliveryChannel
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dcS3KeyPrefix
- The prefix for the specified Amazon S3 bucket.dcSnsTopicARN
- The Amazon Resource Name (ARN) of the Amazon SNS topic to which AWS Config sends notifications about configuration changes. If you choose a topic from another account, the topic must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon SNS Topic in the AWS Config Developer Guide.dcName
- The name of the delivery channel. By default, AWS Config assigns the name "default" when creating the delivery channel. To change the delivery channel name, you must use the DeleteDeliveryChannel action to delete your current delivery channel, and then you must use the PutDeliveryChannel command to create a delivery channel that has the desired name.dcConfigSnapshotDeliveryProperties
- The options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket.dcS3BucketName
- The name of the Amazon S3 bucket to which AWS Config delivers configuration snapshots and configuration history files. If you specify a bucket that belongs to another AWS account, that bucket must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon S3 Bucket in the AWS Config Developer Guide.
dcS3KeyPrefix :: Lens' DeliveryChannel (Maybe Text) Source #
The prefix for the specified Amazon S3 bucket.
dcSnsTopicARN :: Lens' DeliveryChannel (Maybe Text) Source #
The Amazon Resource Name (ARN) of the Amazon SNS topic to which AWS Config sends notifications about configuration changes. If you choose a topic from another account, the topic must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon SNS Topic in the AWS Config Developer Guide.
dcName :: Lens' DeliveryChannel (Maybe Text) Source #
The name of the delivery channel. By default, AWS Config assigns the name "default" when creating the delivery channel. To change the delivery channel name, you must use the DeleteDeliveryChannel action to delete your current delivery channel, and then you must use the PutDeliveryChannel command to create a delivery channel that has the desired name.
dcConfigSnapshotDeliveryProperties :: Lens' DeliveryChannel (Maybe ConfigSnapshotDeliveryProperties) Source #
The options for how often AWS Config delivers configuration snapshots to the Amazon S3 bucket.
dcS3BucketName :: Lens' DeliveryChannel (Maybe Text) Source #
The name of the Amazon S3 bucket to which AWS Config delivers configuration snapshots and configuration history files. If you specify a bucket that belongs to another AWS account, that bucket must have policies that grant access permissions to AWS Config. For more information, see Permissions for the Amazon S3 Bucket in the AWS Config Developer Guide.
DeliveryChannelStatus
data DeliveryChannelStatus Source #
The status of a specified delivery channel.
Valid values: Success
| Failure
See: deliveryChannelStatus
smart constructor.
deliveryChannelStatus :: DeliveryChannelStatus Source #
Creates a value of DeliveryChannelStatus
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
dcsConfigSnapshotDeliveryInfo
- A list containing the status of the delivery of the snapshot to the specified Amazon S3 bucket.dcsConfigStreamDeliveryInfo
- A list containing the status of the delivery of the configuration stream notification to the specified Amazon SNS topic.dcsConfigHistoryDeliveryInfo
- A list that contains the status of the delivery of the configuration history to the specified Amazon S3 bucket.dcsName
- The name of the delivery channel.
dcsConfigSnapshotDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source #
A list containing the status of the delivery of the snapshot to the specified Amazon S3 bucket.
dcsConfigStreamDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigStreamDeliveryInfo) Source #
A list containing the status of the delivery of the configuration stream notification to the specified Amazon SNS topic.
dcsConfigHistoryDeliveryInfo :: Lens' DeliveryChannelStatus (Maybe ConfigExportDeliveryInfo) Source #
A list that contains the status of the delivery of the configuration history to the specified Amazon S3 bucket.
Evaluation
data Evaluation Source #
Identifies an AWS resource and indicates whether it complies with the AWS Config rule that it was evaluated against.
See: evaluation
smart constructor.
:: Text | |
-> Text | |
-> ComplianceType | |
-> UTCTime | |
-> Evaluation |
Creates a value of Evaluation
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
eAnnotation
- Supplementary information about how the evaluation determined the compliance.eComplianceResourceType
- The type of AWS resource that was evaluated.eComplianceResourceId
- The ID of the AWS resource that was evaluated.eComplianceType
- Indicates whether the AWS resource complies with the AWS Config rule that it was evaluated against. For theEvaluation
data type, AWS Config supports only theCOMPLIANT
,NON_COMPLIANT
, andNOT_APPLICABLE
values. AWS Config does not support theINSUFFICIENT_DATA
value for this data type. Similarly, AWS Config does not acceptINSUFFICIENT_DATA
as the value forComplianceType
from aPutEvaluations
request. For example, an AWS Lambda function for a custom AWS Config rule cannot pass anINSUFFICIENT_DATA
value to AWS Config.eOrderingTimestamp
- The time of the event in AWS Config that triggered the evaluation. For event-based evaluations, the time indicates when AWS Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when AWS Config triggered the evaluation at the frequency that you specified (for example, every 24 hours).
eAnnotation :: Lens' Evaluation (Maybe Text) Source #
Supplementary information about how the evaluation determined the compliance.
eComplianceResourceType :: Lens' Evaluation Text Source #
The type of AWS resource that was evaluated.
eComplianceResourceId :: Lens' Evaluation Text Source #
The ID of the AWS resource that was evaluated.
eComplianceType :: Lens' Evaluation ComplianceType Source #
Indicates whether the AWS resource complies with the AWS Config rule that it was evaluated against. For the Evaluation
data type, AWS Config supports only the COMPLIANT
, NON_COMPLIANT
, and NOT_APPLICABLE
values. AWS Config does not support the INSUFFICIENT_DATA
value for this data type. Similarly, AWS Config does not accept INSUFFICIENT_DATA
as the value for ComplianceType
from a PutEvaluations
request. For example, an AWS Lambda function for a custom AWS Config rule cannot pass an INSUFFICIENT_DATA
value to AWS Config.
eOrderingTimestamp :: Lens' Evaluation UTCTime Source #
The time of the event in AWS Config that triggered the evaluation. For event-based evaluations, the time indicates when AWS Config created the configuration item that triggered the evaluation. For periodic evaluations, the time indicates when AWS Config triggered the evaluation at the frequency that you specified (for example, every 24 hours).
EvaluationResult
data EvaluationResult Source #
The details of an AWS Config evaluation. Provides the AWS resource that was evaluated, the compliance of the resource, related time stamps, and supplementary information.
See: evaluationResult
smart constructor.
evaluationResult :: EvaluationResult Source #
Creates a value of EvaluationResult
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
erEvaluationResultIdentifier
- Uniquely identifies the evaluation result.erAnnotation
- Supplementary information about how the evaluation determined the compliance.erConfigRuleInvokedTime
- The time when the AWS Config rule evaluated the AWS resource.erResultRecordedTime
- The time when AWS Config recorded the evaluation result.erResultToken
- An encrypted token that associates an evaluation with an AWS Config rule. The token identifies the rule, the AWS resource being evaluated, and the event that triggered the evaluation.erComplianceType
- Indicates whether the AWS resource complies with the AWS Config rule that evaluated it. For theEvaluationResult
data type, AWS Config supports only theCOMPLIANT
,NON_COMPLIANT
, andNOT_APPLICABLE
values. AWS Config does not support theINSUFFICIENT_DATA
value for theEvaluationResult
data type.
erEvaluationResultIdentifier :: Lens' EvaluationResult (Maybe EvaluationResultIdentifier) Source #
Uniquely identifies the evaluation result.
erAnnotation :: Lens' EvaluationResult (Maybe Text) Source #
Supplementary information about how the evaluation determined the compliance.
erConfigRuleInvokedTime :: Lens' EvaluationResult (Maybe UTCTime) Source #
The time when the AWS Config rule evaluated the AWS resource.
erResultRecordedTime :: Lens' EvaluationResult (Maybe UTCTime) Source #
The time when AWS Config recorded the evaluation result.
erResultToken :: Lens' EvaluationResult (Maybe Text) Source #
An encrypted token that associates an evaluation with an AWS Config rule. The token identifies the rule, the AWS resource being evaluated, and the event that triggered the evaluation.
erComplianceType :: Lens' EvaluationResult (Maybe ComplianceType) Source #
Indicates whether the AWS resource complies with the AWS Config rule that evaluated it. For the EvaluationResult
data type, AWS Config supports only the COMPLIANT
, NON_COMPLIANT
, and NOT_APPLICABLE
values. AWS Config does not support the INSUFFICIENT_DATA
value for the EvaluationResult
data type.
EvaluationResultIdentifier
data EvaluationResultIdentifier Source #
Uniquely identifies an evaluation result.
See: evaluationResultIdentifier
smart constructor.
evaluationResultIdentifier :: EvaluationResultIdentifier Source #
Creates a value of EvaluationResultIdentifier
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
eriEvaluationResultQualifier
- Identifies an AWS Config rule used to evaluate an AWS resource, and provides the type and ID of the evaluated resource.eriOrderingTimestamp
- The time of the event that triggered the evaluation of your AWS resources. The time can indicate when AWS Config delivered a configuration item change notification, or it can indicate when AWS Config delivered the configuration snapshot, depending on which event triggered the evaluation.
eriEvaluationResultQualifier :: Lens' EvaluationResultIdentifier (Maybe EvaluationResultQualifier) Source #
Identifies an AWS Config rule used to evaluate an AWS resource, and provides the type and ID of the evaluated resource.
eriOrderingTimestamp :: Lens' EvaluationResultIdentifier (Maybe UTCTime) Source #
The time of the event that triggered the evaluation of your AWS resources. The time can indicate when AWS Config delivered a configuration item change notification, or it can indicate when AWS Config delivered the configuration snapshot, depending on which event triggered the evaluation.
EvaluationResultQualifier
data EvaluationResultQualifier Source #
Identifies an AWS Config rule that evaluated an AWS resource, and provides the type and ID of the resource that the rule evaluated.
See: evaluationResultQualifier
smart constructor.
evaluationResultQualifier :: EvaluationResultQualifier Source #
Creates a value of EvaluationResultQualifier
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
erqResourceId
- The ID of the evaluated AWS resource.erqResourceType
- The type of AWS resource that was evaluated.erqConfigRuleName
- The name of the AWS Config rule that was used in the evaluation.
erqResourceId :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The ID of the evaluated AWS resource.
erqResourceType :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The type of AWS resource that was evaluated.
erqConfigRuleName :: Lens' EvaluationResultQualifier (Maybe Text) Source #
The name of the AWS Config rule that was used in the evaluation.
OrganizationAggregationSource
data OrganizationAggregationSource Source #
This object contains regions to setup the aggregator and an IAM role to retrieve organization details.
See: organizationAggregationSource
smart constructor.
organizationAggregationSource Source #
Creates a value of OrganizationAggregationSource
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
oasAWSRegions
- The source regions being aggregated.oasAllAWSRegions
- If true, aggreagate existing AWS Config regions and future regions.oasRoleARN
- ARN of the IAM role used to retreive AWS Organization details associated with the aggregator account.
oasAWSRegions :: Lens' OrganizationAggregationSource (Maybe (NonEmpty Text)) Source #
The source regions being aggregated.
oasAllAWSRegions :: Lens' OrganizationAggregationSource (Maybe Bool) Source #
If true, aggreagate existing AWS Config regions and future regions.
oasRoleARN :: Lens' OrganizationAggregationSource Text Source #
ARN of the IAM role used to retreive AWS Organization details associated with the aggregator account.
PendingAggregationRequest
data PendingAggregationRequest Source #
An object that represents the account ID and region of an aggregator account that is requesting authorization but is not yet authorized.
See: pendingAggregationRequest
smart constructor.
pendingAggregationRequest :: PendingAggregationRequest Source #
Creates a value of PendingAggregationRequest
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
parRequesterAccountId
- The 12-digit account ID of the account requesting to aggregate data.parRequesterAWSRegion
- The region requesting to aggregate data.
parRequesterAccountId :: Lens' PendingAggregationRequest (Maybe Text) Source #
The 12-digit account ID of the account requesting to aggregate data.
parRequesterAWSRegion :: Lens' PendingAggregationRequest (Maybe Text) Source #
The region requesting to aggregate data.
RecordingGroup
data RecordingGroup Source #
Specifies the types of AWS resource for which AWS Config records configuration changes.
In the recording group, you specify whether all supported types or specific types of resources are recorded.
By default, AWS Config records configuration changes for all supported types of regional resources that AWS Config discovers in the region in which it is running. Regional resources are tied to a region and can be used only in that region. Examples of regional resources are EC2 instances and EBS volumes.
You can also have AWS Config record configuration changes for supported types of global resources (for example, IAM resources). Global resources are not tied to an individual region and can be used in all regions.
Important: The configuration details for any global resource are the same in all regions. If you customize AWS Config in multiple regions to record global resources, it will create multiple configuration items each time a global resource changes: one configuration item for each region. These configuration items will contain identical data. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources, unless you want the configuration items to be available in multiple regions.
If you don't want AWS Config to record all resources, you can specify which types of resources it will record with the resourceTypes
parameter.
For a list of supported resource types, see Supported Resource Types .
For more information, see Selecting Which Resources AWS Config Records .
See: recordingGroup
smart constructor.
recordingGroup :: RecordingGroup Source #
Creates a value of RecordingGroup
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rgAllSupported
- Specifies whether AWS Config records configuration changes for every supported type of regional resource. If you set this option totrue
, when AWS Config adds support for a new type of regional resource, it starts recording resources of that type automatically. If you set this option totrue
, you cannot enumerate a list ofresourceTypes
.rgIncludeGlobalResourceTypes
- Specifies whether AWS Config includes all supported types of global resources (for example, IAM resources) with the resources that it records. Before you can set this option totrue
, you must set theallSupported
option totrue
. If you set this option totrue
, when AWS Config adds support for a new type of global resource, it starts recording resources of that type automatically. The configuration details for any global resource are the same in all regions. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources.rgResourceTypes
- A comma-separated list that specifies the types of AWS resources for which AWS Config records configuration changes (for example,AWS::EC2::Instance
orAWS::CloudTrail::Trail
). Before you can set this option totrue
, you must set theallSupported
option tofalse
. If you set this option totrue
, when AWS Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of validresourceTypes
values, see the resourceType Value column in Supported AWS Resource Types .
rgAllSupported :: Lens' RecordingGroup (Maybe Bool) Source #
Specifies whether AWS Config records configuration changes for every supported type of regional resource. If you set this option to true
, when AWS Config adds support for a new type of regional resource, it starts recording resources of that type automatically. If you set this option to true
, you cannot enumerate a list of resourceTypes
.
rgIncludeGlobalResourceTypes :: Lens' RecordingGroup (Maybe Bool) Source #
Specifies whether AWS Config includes all supported types of global resources (for example, IAM resources) with the resources that it records. Before you can set this option to true
, you must set the allSupported
option to true
. If you set this option to true
, when AWS Config adds support for a new type of global resource, it starts recording resources of that type automatically. The configuration details for any global resource are the same in all regions. To prevent duplicate configuration items, you should consider customizing AWS Config in only one region to record global resources.
rgResourceTypes :: Lens' RecordingGroup [ResourceType] Source #
A comma-separated list that specifies the types of AWS resources for which AWS Config records configuration changes (for example, AWS::EC2::Instance
or AWS::CloudTrail::Trail
). Before you can set this option to true
, you must set the allSupported
option to false
. If you set this option to true
, when AWS Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of valid resourceTypes
values, see the resourceType Value column in Supported AWS Resource Types .
Relationship
data Relationship Source #
The relationship of the related resource to the main resource.
See: relationship
smart constructor.
relationship :: Relationship Source #
Creates a value of Relationship
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rResourceId
- The ID of the related resource (for example,sg-xxxxxx
).rResourceType
- The resource type of the related resource.rResourceName
- The custom name of the related resource, if available.rRelationshipName
- The type of relationship with the related resource.
rResourceId :: Lens' Relationship (Maybe Text) Source #
The ID of the related resource (for example, sg-xxxxxx
).
rResourceType :: Lens' Relationship (Maybe ResourceType) Source #
The resource type of the related resource.
rResourceName :: Lens' Relationship (Maybe Text) Source #
The custom name of the related resource, if available.
rRelationshipName :: Lens' Relationship (Maybe Text) Source #
The type of relationship with the related resource.
ResourceCount
data ResourceCount Source #
An object that contains the resource type and the number of resources.
See: resourceCount
smart constructor.
resourceCount :: ResourceCount Source #
Creates a value of ResourceCount
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rcResourceType
- The resource type (for example,AWS::EC2::Instance
).rcCount
- The number of resources.
rcResourceType :: Lens' ResourceCount (Maybe ResourceType) Source #
The resource type (for example, AWS::EC2::Instance
).
ResourceIdentifier
data ResourceIdentifier Source #
The details that identify a resource that is discovered by AWS Config, including the resource type, ID, and (if available) the custom resource name.
See: resourceIdentifier
smart constructor.
resourceIdentifier :: ResourceIdentifier Source #
Creates a value of ResourceIdentifier
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
riResourceId
- The ID of the resource (for example,sg-xxxxxx
).riResourceType
- The type of resource.riResourceName
- The custom name of the resource (if available).riResourceDeletionTime
- The time that the resource was deleted.
riResourceId :: Lens' ResourceIdentifier (Maybe Text) Source #
The ID of the resource (for example, sg-xxxxxx
).
riResourceType :: Lens' ResourceIdentifier (Maybe ResourceType) Source #
The type of resource.
riResourceName :: Lens' ResourceIdentifier (Maybe Text) Source #
The custom name of the resource (if available).
riResourceDeletionTime :: Lens' ResourceIdentifier (Maybe UTCTime) Source #
The time that the resource was deleted.
ResourceKey
data ResourceKey Source #
The details that identify a resource within AWS Config, including the resource type and resource ID.
See: resourceKey
smart constructor.
Creates a value of ResourceKey
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
rkResourceType
- The resource type.rkResourceId
- The ID of the resource (for example., sg-xxxxxx).
rkResourceType :: Lens' ResourceKey ResourceType Source #
The resource type.
rkResourceId :: Lens' ResourceKey Text Source #
The ID of the resource (for example., sg-xxxxxx).
Scope
Defines which resources trigger an evaluation for an AWS Config rule. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. Specify a scope to constrain which resources trigger an evaluation for a rule. Otherwise, evaluations for the rule are triggered when any resource in your recording group changes in configuration.
See: scope
smart constructor.
Creates a value of Scope
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sComplianceResourceTypes
- The resource types of only those AWS resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID forComplianceResourceId
.sComplianceResourceId
- The ID of the only AWS resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type forComplianceResourceTypes
.sTagValue
- The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule. If you specify a value forTagValue
, you must also specify a value forTagKey
.sTagKey
- The tag key that is applied to only those AWS resources that you want to trigger an evaluation for the rule.
sComplianceResourceTypes :: Lens' Scope [Text] Source #
The resource types of only those AWS resources that you want to trigger an evaluation for the rule. You can only specify one type if you also specify a resource ID for ComplianceResourceId
.
sComplianceResourceId :: Lens' Scope (Maybe Text) Source #
The ID of the only AWS resource that you want to trigger an evaluation for the rule. If you specify a resource ID, you must specify one resource type for ComplianceResourceTypes
.
sTagValue :: Lens' Scope (Maybe Text) Source #
The tag value applied to only those AWS resources that you want to trigger an evaluation for the rule. If you specify a value for TagValue
, you must also specify a value for TagKey
.
sTagKey :: Lens' Scope (Maybe Text) Source #
The tag key that is applied to only those AWS resources that you want to trigger an evaluation for the rule.
Source
Provides the AWS Config rule owner (AWS or customer), the rule identifier, and the events that trigger the evaluation of your AWS resources.
See: source
smart constructor.
Creates a value of Source
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sSourceDetails
- Provides the source and type of the event that causes AWS Config to evaluate your AWS resources.sOwner
- Indicates whether AWS or the customer owns and manages the AWS Config rule.sSourceIdentifier
- For AWS Config managed rules, a predefined identifier from a list. For example,IAM_PASSWORD_POLICY
is a managed rule. To reference a managed rule, see Using AWS Managed Config Rules . For custom rules, the identifier is the Amazon Resource Name (ARN) of the rule's AWS Lambda function, such asarn:aws:lambda:us-east-2:123456789012:function:custom_rule_name
.
sSourceDetails :: Lens' Source [SourceDetail] Source #
Provides the source and type of the event that causes AWS Config to evaluate your AWS resources.
sOwner :: Lens' Source Owner Source #
Indicates whether AWS or the customer owns and manages the AWS Config rule.
sSourceIdentifier :: Lens' Source Text Source #
For AWS Config managed rules, a predefined identifier from a list. For example, IAM_PASSWORD_POLICY
is a managed rule. To reference a managed rule, see Using AWS Managed Config Rules . For custom rules, the identifier is the Amazon Resource Name (ARN) of the rule's AWS Lambda function, such as arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name
.
SourceDetail
data SourceDetail Source #
Provides the source and the message types that trigger AWS Config to evaluate your AWS resources against a rule. It also provides the frequency with which you want AWS Config to run evaluations for the rule if the trigger type is periodic. You can specify the parameter values for SourceDetail
only for custom rules.
See: sourceDetail
smart constructor.
sourceDetail :: SourceDetail Source #
Creates a value of SourceDetail
with the minimum fields required to make a request.
Use one of the following lenses to modify other fields as desired:
sdMessageType
- The type of notification that triggers AWS Config to run an evaluation for a rule. You can specify the following notification types: *ConfigurationItemChangeNotification
- Triggers an evaluation when AWS Config delivers a configuration item as a result of a resource change. *OversizedConfigurationItemChangeNotification
- Triggers an evaluation when AWS Config delivers an oversized configuration item. AWS Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. *ScheduledNotification
- Triggers a periodic evaluation at the frequency specified forMaximumExecutionFrequency
. *ConfigurationSnapshotDeliveryCompleted
- Triggers a periodic evaluation when AWS Config delivers a configuration snapshot. If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one forConfigurationItemChangeNotification
and one forOversizedConfigurationItemChangeNotification
.sdMaximumExecutionFrequency
- The frequency at which you want AWS Config to run evaluations for a custom rule with a periodic trigger. If you specify a value forMaximumExecutionFrequency
, thenMessageType
must use theScheduledNotification
value.sdEventSource
- The source of the event, such as an AWS service, that triggers AWS Config to evaluate your AWS resources.
sdMessageType :: Lens' SourceDetail (Maybe MessageType) Source #
The type of notification that triggers AWS Config to run an evaluation for a rule. You can specify the following notification types: * ConfigurationItemChangeNotification
- Triggers an evaluation when AWS Config delivers a configuration item as a result of a resource change. * OversizedConfigurationItemChangeNotification
- Triggers an evaluation when AWS Config delivers an oversized configuration item. AWS Config may generate this notification type when a resource changes and the notification exceeds the maximum size allowed by Amazon SNS. * ScheduledNotification
- Triggers a periodic evaluation at the frequency specified for MaximumExecutionFrequency
. * ConfigurationSnapshotDeliveryCompleted
- Triggers a periodic evaluation when AWS Config delivers a configuration snapshot. If you want your custom rule to be triggered by configuration changes, specify two SourceDetail objects, one for ConfigurationItemChangeNotification
and one for OversizedConfigurationItemChangeNotification
.
sdMaximumExecutionFrequency :: Lens' SourceDetail (Maybe MaximumExecutionFrequency) Source #
The frequency at which you want AWS Config to run evaluations for a custom rule with a periodic trigger. If you specify a value for MaximumExecutionFrequency
, then MessageType
must use the ScheduledNotification
value.
sdEventSource :: Lens' SourceDetail (Maybe EventSource) Source #
The source of the event, such as an AWS service, that triggers AWS Config to evaluate your AWS resources.