Skip to main content

aws.config

Supported Platform

  • aws

Description

AWS Config

The aws.config resource is used to assess the configuration of the AWS Config service. The resource provides the .recorders field which returns a list of aws.config.recorder resources representing all AWS Config recorders configured across all enabled regions, as well as the .rules field which returns a list of aws.config.rule resources representing all AWS Config rules configured across all enabled regions in the account.

Fields

IDTYPEDESCRIPTION
recorders[]aws.config.recorderlist of configuration recorders for each region in the account
rules[]aws.config.rulelist of aws config rules

Examples

Return a list of aws.config.rule resources representing AWS Config rules configured across all enabled regions and the value for specified fields

aws.config.rules {
arn
state
source
}

Return a list of AWS Config recorders configured across all enabled regions and the value for specified fields

aws.config.recorders {
name
roleArn
allSupported
includeGlobalResourceTypes
recording
lastStatus
region
}

Ensure AWS Config is enabled in all regions

aws.config.recorders.any(
allSupported == true && includeGlobalResourceTypes == true
);
aws.config.recorders
.where(allSupported == true && includeGlobalResourceTypes == true)
.all(recording == true && lastStatus == "SUCCESS");

References