{-# LANGUAGE DeriveGeneric #-} {-# LANGUAGE DuplicateRecordFields #-} {-# LANGUAGE NamedFieldPuns #-} {-# LANGUAGE OverloadedStrings #-} {-# LANGUAGE RecordWildCards #-} {-# LANGUAGE StrictData #-} {-# LANGUAGE TypeFamilies #-} {-# LANGUAGE NoImplicitPrelude #-} {-# OPTIONS_GHC -fno-warn-unused-binds #-} {-# OPTIONS_GHC -fno-warn-unused-imports #-} {-# OPTIONS_GHC -fno-warn-unused-matches #-} -- Derived from AWS service descriptions, licensed under Apache 2.0. -- | -- Module : Amazonka.Config.DescribeComplianceByConfigRule -- Copyright : (c) 2013-2023 Brendan Hay -- License : Mozilla Public License, v. 2.0. -- Maintainer : Brendan Hay -- Stability : auto-generated -- Portability : non-portable (GHC extensions) -- -- Indicates whether the specified Config rules are compliant. If a rule is -- noncompliant, this action returns the number of Amazon Web Services -- resources that do not comply with the rule. -- -- A rule is compliant if all of the evaluated resources comply with it. It -- is noncompliant if any of these resources do not comply. -- -- If Config has no current evaluation results for the rule, it returns -- @INSUFFICIENT_DATA@. This result might indicate one of the following -- conditions: -- -- - Config has never invoked an evaluation for the rule. To check -- whether it has, use the @DescribeConfigRuleEvaluationStatus@ action -- to get the @LastSuccessfulInvocationTime@ and -- @LastFailedInvocationTime@. -- -- - The rule\'s Lambda function is failing to send evaluation results to -- Config. Verify that the role you assigned to your configuration -- recorder includes the @config:PutEvaluations@ permission. If the -- rule is a custom rule, verify that the Lambda execution role -- includes the @config:PutEvaluations@ permission. -- -- - The rule\'s Lambda function has returned @NOT_APPLICABLE@ for all -- evaluation results. This can occur if the resources were deleted or -- removed from the rule\'s scope. -- -- This operation returns paginated results. module Amazonka.Config.DescribeComplianceByConfigRule ( -- * Creating a Request DescribeComplianceByConfigRule (..), newDescribeComplianceByConfigRule, -- * Request Lenses describeComplianceByConfigRule_complianceTypes, describeComplianceByConfigRule_configRuleNames, describeComplianceByConfigRule_nextToken, -- * Destructuring the Response DescribeComplianceByConfigRuleResponse (..), newDescribeComplianceByConfigRuleResponse, -- * Response Lenses describeComplianceByConfigRuleResponse_complianceByConfigRules, describeComplianceByConfigRuleResponse_nextToken, describeComplianceByConfigRuleResponse_httpStatus, ) where import Amazonka.Config.Types import qualified Amazonka.Core as Core import qualified Amazonka.Core.Lens.Internal as Lens import qualified Amazonka.Data as Data import qualified Amazonka.Prelude as Prelude import qualified Amazonka.Request as Request import qualified Amazonka.Response as Response -- | -- -- /See:/ 'newDescribeComplianceByConfigRule' smart constructor. data DescribeComplianceByConfigRule = DescribeComplianceByConfigRule' { -- | Filters the results by compliance. -- -- The allowed values are @COMPLIANT@ and @NON_COMPLIANT@. complianceTypes :: Prelude.Maybe [ComplianceType], -- | Specify one or more Config rule names to filter the results by rule. configRuleNames :: Prelude.Maybe [Prelude.Text], -- | The @nextToken@ string returned on a previous page that you use to get -- the next page of results in a paginated response. nextToken :: Prelude.Maybe Prelude.Text } deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) -- | -- Create a value of 'DescribeComplianceByConfigRule' with all optional fields omitted. -- -- Use or to modify other optional fields. -- -- The following record fields are available, with the corresponding lenses provided -- for backwards compatibility: -- -- 'complianceTypes', 'describeComplianceByConfigRule_complianceTypes' - Filters the results by compliance. -- -- The allowed values are @COMPLIANT@ and @NON_COMPLIANT@. -- -- 'configRuleNames', 'describeComplianceByConfigRule_configRuleNames' - Specify one or more Config rule names to filter the results by rule. -- -- 'nextToken', 'describeComplianceByConfigRule_nextToken' - The @nextToken@ string returned on a previous page that you use to get -- the next page of results in a paginated response. newDescribeComplianceByConfigRule :: DescribeComplianceByConfigRule newDescribeComplianceByConfigRule = DescribeComplianceByConfigRule' { complianceTypes = Prelude.Nothing, configRuleNames = Prelude.Nothing, nextToken = Prelude.Nothing } -- | Filters the results by compliance. -- -- The allowed values are @COMPLIANT@ and @NON_COMPLIANT@. describeComplianceByConfigRule_complianceTypes :: Lens.Lens' DescribeComplianceByConfigRule (Prelude.Maybe [ComplianceType]) describeComplianceByConfigRule_complianceTypes = Lens.lens (\DescribeComplianceByConfigRule' {complianceTypes} -> complianceTypes) (\s@DescribeComplianceByConfigRule' {} a -> s {complianceTypes = a} :: DescribeComplianceByConfigRule) Prelude.. Lens.mapping Lens.coerced -- | Specify one or more Config rule names to filter the results by rule. describeComplianceByConfigRule_configRuleNames :: Lens.Lens' DescribeComplianceByConfigRule (Prelude.Maybe [Prelude.Text]) describeComplianceByConfigRule_configRuleNames = Lens.lens (\DescribeComplianceByConfigRule' {configRuleNames} -> configRuleNames) (\s@DescribeComplianceByConfigRule' {} a -> s {configRuleNames = a} :: DescribeComplianceByConfigRule) Prelude.. Lens.mapping Lens.coerced -- | The @nextToken@ string returned on a previous page that you use to get -- the next page of results in a paginated response. describeComplianceByConfigRule_nextToken :: Lens.Lens' DescribeComplianceByConfigRule (Prelude.Maybe Prelude.Text) describeComplianceByConfigRule_nextToken = Lens.lens (\DescribeComplianceByConfigRule' {nextToken} -> nextToken) (\s@DescribeComplianceByConfigRule' {} a -> s {nextToken = a} :: DescribeComplianceByConfigRule) instance Core.AWSPager DescribeComplianceByConfigRule where page rq rs | Core.stop ( rs Lens.^? describeComplianceByConfigRuleResponse_nextToken Prelude.. Lens._Just ) = Prelude.Nothing | Core.stop ( rs Lens.^? describeComplianceByConfigRuleResponse_complianceByConfigRules Prelude.. Lens._Just ) = Prelude.Nothing | Prelude.otherwise = Prelude.Just Prelude.$ rq Prelude.& describeComplianceByConfigRule_nextToken Lens..~ rs Lens.^? describeComplianceByConfigRuleResponse_nextToken Prelude.. Lens._Just instance Core.AWSRequest DescribeComplianceByConfigRule where type AWSResponse DescribeComplianceByConfigRule = DescribeComplianceByConfigRuleResponse request overrides = Request.postJSON (overrides defaultService) response = Response.receiveJSON ( \s h x -> DescribeComplianceByConfigRuleResponse' Prelude.<$> ( x Data..?> "ComplianceByConfigRules" Core..!@ Prelude.mempty ) Prelude.<*> (x Data..?> "NextToken") Prelude.<*> (Prelude.pure (Prelude.fromEnum s)) ) instance Prelude.Hashable DescribeComplianceByConfigRule where hashWithSalt _salt DescribeComplianceByConfigRule' {..} = _salt `Prelude.hashWithSalt` complianceTypes `Prelude.hashWithSalt` configRuleNames `Prelude.hashWithSalt` nextToken instance Prelude.NFData DescribeComplianceByConfigRule where rnf DescribeComplianceByConfigRule' {..} = Prelude.rnf complianceTypes `Prelude.seq` Prelude.rnf configRuleNames `Prelude.seq` Prelude.rnf nextToken instance Data.ToHeaders DescribeComplianceByConfigRule where toHeaders = Prelude.const ( Prelude.mconcat [ "X-Amz-Target" Data.=# ( "StarlingDoveService.DescribeComplianceByConfigRule" :: Prelude.ByteString ), "Content-Type" Data.=# ( "application/x-amz-json-1.1" :: Prelude.ByteString ) ] ) instance Data.ToJSON DescribeComplianceByConfigRule where toJSON DescribeComplianceByConfigRule' {..} = Data.object ( Prelude.catMaybes [ ("ComplianceTypes" Data..=) Prelude.<$> complianceTypes, ("ConfigRuleNames" Data..=) Prelude.<$> configRuleNames, ("NextToken" Data..=) Prelude.<$> nextToken ] ) instance Data.ToPath DescribeComplianceByConfigRule where toPath = Prelude.const "/" instance Data.ToQuery DescribeComplianceByConfigRule where toQuery = Prelude.const Prelude.mempty -- | -- -- /See:/ 'newDescribeComplianceByConfigRuleResponse' smart constructor. data DescribeComplianceByConfigRuleResponse = DescribeComplianceByConfigRuleResponse' { -- | Indicates whether each of the specified Config rules is compliant. complianceByConfigRules :: Prelude.Maybe [ComplianceByConfigRule], -- | The string that you use in a subsequent request to get the next page of -- results in a paginated response. nextToken :: Prelude.Maybe Prelude.Text, -- | The response's http status code. httpStatus :: Prelude.Int } deriving (Prelude.Eq, Prelude.Read, Prelude.Show, Prelude.Generic) -- | -- Create a value of 'DescribeComplianceByConfigRuleResponse' with all optional fields omitted. -- -- Use or to modify other optional fields. -- -- The following record fields are available, with the corresponding lenses provided -- for backwards compatibility: -- -- 'complianceByConfigRules', 'describeComplianceByConfigRuleResponse_complianceByConfigRules' - Indicates whether each of the specified Config rules is compliant. -- -- 'nextToken', 'describeComplianceByConfigRuleResponse_nextToken' - The string that you use in a subsequent request to get the next page of -- results in a paginated response. -- -- 'httpStatus', 'describeComplianceByConfigRuleResponse_httpStatus' - The response's http status code. newDescribeComplianceByConfigRuleResponse :: -- | 'httpStatus' Prelude.Int -> DescribeComplianceByConfigRuleResponse newDescribeComplianceByConfigRuleResponse pHttpStatus_ = DescribeComplianceByConfigRuleResponse' { complianceByConfigRules = Prelude.Nothing, nextToken = Prelude.Nothing, httpStatus = pHttpStatus_ } -- | Indicates whether each of the specified Config rules is compliant. describeComplianceByConfigRuleResponse_complianceByConfigRules :: Lens.Lens' DescribeComplianceByConfigRuleResponse (Prelude.Maybe [ComplianceByConfigRule]) describeComplianceByConfigRuleResponse_complianceByConfigRules = Lens.lens (\DescribeComplianceByConfigRuleResponse' {complianceByConfigRules} -> complianceByConfigRules) (\s@DescribeComplianceByConfigRuleResponse' {} a -> s {complianceByConfigRules = a} :: DescribeComplianceByConfigRuleResponse) Prelude.. Lens.mapping Lens.coerced -- | The string that you use in a subsequent request to get the next page of -- results in a paginated response. describeComplianceByConfigRuleResponse_nextToken :: Lens.Lens' DescribeComplianceByConfigRuleResponse (Prelude.Maybe Prelude.Text) describeComplianceByConfigRuleResponse_nextToken = Lens.lens (\DescribeComplianceByConfigRuleResponse' {nextToken} -> nextToken) (\s@DescribeComplianceByConfigRuleResponse' {} a -> s {nextToken = a} :: DescribeComplianceByConfigRuleResponse) -- | The response's http status code. describeComplianceByConfigRuleResponse_httpStatus :: Lens.Lens' DescribeComplianceByConfigRuleResponse Prelude.Int describeComplianceByConfigRuleResponse_httpStatus = Lens.lens (\DescribeComplianceByConfigRuleResponse' {httpStatus} -> httpStatus) (\s@DescribeComplianceByConfigRuleResponse' {} a -> s {httpStatus = a} :: DescribeComplianceByConfigRuleResponse) instance Prelude.NFData DescribeComplianceByConfigRuleResponse where rnf DescribeComplianceByConfigRuleResponse' {..} = Prelude.rnf complianceByConfigRules `Prelude.seq` Prelude.rnf nextToken `Prelude.seq` Prelude.rnf httpStatus