Package-level declarations
Types
Indicates whether an AWS resource or CC rule is compliant and provides the number of contributors that affect the compliance.
Builder for CompliancePropertiesArgs.
Provides the CustomPolicyDetails, the rule owner (```` for managed rules, `CUSTOM_POLICY`
for Custom Policy rules, and `CUSTOM_LAMBDA`
for Custom Lambda rules), the rule identifier, and the events that cause the evaluation of your AWS resources. @property enableDebugLogDelivery The boolean expression for enabling debug logging for your CC Custom Policy rule. The default value is `false`
. @property policyRuntime The runtime system for your CC Custom Policy rule. Guard is a policy-as-code language that allows you to write policies that are enforced by CC Custom Policy rules. For more information about Guard, see the Guard GitHub Repository. @property policyText The policy definition containing the logic for your CC Custom Policy rule.
Builder for ConfigRuleCustomPolicyDetailsArgs.
The configuration object for CC rule evaluation mode. The supported valid values are Detective or Proactive.
Defines which resources trigger an evaluation for an CC rule. The scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. Specify a scope to constrain which resources trigger an evaluation for a rule. Otherwise, evaluations for the rule are triggered when any resource in your recording group changes in configuration.
Builder for ConfigRuleScopeArgs.
Provides the CustomPolicyDetails, the rule owner (```` for managed rules, `CUSTOM_POLICY`
for Custom Policy rules, and `CUSTOM_LAMBDA`
for Custom Lambda rules), the rule identifier, and the events that cause the evaluation of your AWS resources. @property customPolicyDetails Provides the runtime system, policy definition, and whether debug logging is enabled. Required when owner is set to `CUSTOM_POLICY`
. @property owner Indicates whether AWS or the customer owns and manages the CC rule. CC Managed Rules are predefined rules owned by AWS. For more information, see Managed Rules in the developer guide. CC Custom Rules are rules that you can develop either with Guard (`CUSTOM_POLICY`
) or LAMlong (`CUSTOM_LAMBDA`
). For more information, see Custom Rules in the developer guide. @property sourceDetails Provides the source and the message types that cause CC to evaluate your AWS resources against a rule. It also provides the frequency with which you want CC to run evaluations for the rule if the trigger type is periodic. If the owner is set to `CUSTOM_POLICY`
, the only acceptable values for the CC rule trigger message type are `ConfigurationItemChangeNotification`
and `OversizedConfigurationItemChangeNotification`
. @property sourceIdentifier For CC Managed rules, a predefined identifier from a list. For example, `IAM_PASSWORD_POLICY`
is a managed rule. To reference a managed rule, see List of Managed Rules. For CC Custom Lambda rules, the identifier is the Amazon Resource Name (ARN) of the rule's LAMlong function, such as `arn:aws:lambda:us-east-2:123456789012:function:custom_rule_name`
. For CC Custom Policy rules, this field will be ignored.
Builder for ConfigRuleSourceArgs.
Provides the source and the message types that trigger CC to evaluate your AWS resources against a rule. It also provides the frequency with which you want CC to run evaluations for the rule if the trigger type is periodic. You can specify the parameter values for `SourceDetail`
only for custom rules.
Builder for ConfigRuleSourceDetailArgs.
Input parameters in the form of key-value pairs for the conformance pack.
Builder for ConformancePackInputParameterArgs.
Builder for GetConfigRulePlainArgs.
Builder for GetConformancePackPlainArgs.
Builder for GetStoredQueryPlainArgs.
Input parameters in the form of key-value pairs for the conformance pack.
The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document.