ConfigurationItem

The 12-digit AWS account ID associated with the resource.

Type: String

Length Constraints: Fixed length of 12.

Pattern: \d{12}

Required: No

Amazon Resource Name (ARN) associated with the resource.

Type: String

Required: No

The Availability Zone associated with the resource.

Type: String

Required: No

The region where the resource resides.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Required: No

The description of the resource configuration.

Type: String

Required: No

The time when the recording of configuration changes was initiated for the resource.

Type: Timestamp

Required: No

The time when configuration changes for the resource were delivered.

Type: Timestamp

Required: No

Unique MD5 hash that represents the configuration item's state.

You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.

Type: String

Required: No

The configuration item status. Valid values include:

Type: String

Valid Values: OK | ResourceDiscovered | ResourceNotRecorded | ResourceDeleted | ResourceDeletedNotRecorded

Required: No

An identifier that indicates the ordering of the configuration items of a resource.

Type: String

Required: No

The recording frequency that AWS Config uses to record configuration changes for the resource.

Type: String

Valid Values: CONTINUOUS | DAILY

Required: No

A list of CloudTrail event IDs.

A populated field indicates that the current configuration was initiated by the events recorded in the CloudTrail log. For more information about CloudTrail, see What Is AWS CloudTrail.

An empty field indicates that the current configuration was not initiated by any event. As of Version 1.3, the relatedEvents field is empty. You can access the LookupEvents API in the AWS CloudTrail API Reference to retrieve the events for the resource.

Type: Array of strings

Required: No

A list of related AWS resources.

Type: Array of Relationship objects

Required: No

The time stamp when the resource was created.

Type: Timestamp

Required: No

The ID of the resource (for example, sg-xxxxxx).

Type: String

Length Constraints: Minimum length of 1. Maximum length of 768.

Required: No

The custom name of the resource, if available.

Type: String

Required: No

The type of AWS resource.

Type: String

Valid Values: AWS::AccessAnalyzer::Analyzer | AWS::ACM::Certificate | AWS::ACMPCA::CertificateAuthority | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AmazonMQ::Broker | AWS::Amplify::App | AWS::Amplify::Branch | AWS::ApiGateway::ClientCertificate | AWS::ApiGateway::DomainName | AWS::ApiGateway::Method | AWS::ApiGateway::Resource | AWS::ApiGateway::RestApi | AWS::ApiGateway::Stage | AWS::ApiGatewayV2::Api | AWS::ApiGatewayV2::DomainName | AWS::ApiGatewayV2::Route | AWS::ApiGatewayV2::Stage | AWS::AppConfig::Application | AWS::AppConfig::ConfigurationProfile | AWS::AppConfig::DeploymentStrategy | AWS::AppConfig::Environment | AWS::AppConfig::HostedConfigurationVersion | AWS::AppFlow::Flow | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::AppMesh::Route | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualRouter | AWS::AppMesh::VirtualService | AWS::AppRunner::Service | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::AppStream::DirectoryConfig | AWS::AppSync::GraphQLApi | AWS::Athena::DataCatalog | AWS::Athena::PreparedStatement | AWS::Athena::WorkGroup | AWS::AuditManager::Assessment | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::AutoScaling::WarmPool | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::Backup::ReportPlan | AWS::Batch::ComputeEnvironment | AWS::Batch::JobQueue | AWS::Budgets::BudgetsAction | AWS::Cassandra::Keyspace | AWS::Cloud9::EnvironmentEC2 | AWS::CloudFormation::Stack | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::CloudTrail::Trail | AWS::CloudWatch::Alarm | AWS::CloudWatch::MetricStream | AWS::CodeArtifact::Repository | AWS::CodeBuild::Project | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::CodePipeline::Pipeline | AWS::Config::ConfigurationRecorder | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::Connect::Instance | AWS::Connect::PhoneNumber | AWS::Connect::QuickConnect | AWS::CustomerProfiles::Domain | AWS::CustomerProfiles::ObjectType | AWS::DataSync::LocationEFS | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationFSxWindows | AWS::DataSync::LocationHDFS | AWS::DataSync::LocationNFS | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationS3 | AWS::DataSync::LocationSMB | AWS::DataSync::Task | AWS::DAX::Cluster | AWS::DAX::ParameterGroup | AWS::DAX::SubnetGroup | AWS::Detective::Graph | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::DeviceFarm::TestGridProject | AWS::DMS::Certificate | AWS::DMS::Endpoint | AWS::DMS::EventSubscription | AWS::DMS::ReplicationInstance | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::ReplicationTask | AWS::DynamoDB::GlobalTable | AWS::DynamoDB::Table | AWS::EC2::CapacityReservation | AWS::EC2::CarrierGateway | AWS::EC2::ClientVpnAuthorizationRule | AWS::EC2::ClientVpnEndpoint | AWS::EC2::CustomerGateway | AWS::EC2::DHCPOptions | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::EIP | AWS::EC2::EC2Fleet | AWS::EC2::FlowLog | AWS::EC2::Host | AWS::EC2::Image | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::IPAM | AWS::EC2::IPAMPool | AWS::EC2::IPAMScope | AWS::EC2::LaunchTemplate | AWS::EC2::NatGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EC2::NetworkInsightsPath | AWS::EC2::NetworkInterface | AWS::EC2::PlacementGroup | AWS::EC2::PrefixList | AWS::EC2::RegisteredHAInstance | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::SpotFleet | AWS::EC2::Subnet | AWS::EC2::SubnetRouteTableAssociation | AWS::EC2::TrafficMirrorFilter | AWS::EC2::TrafficMirrorSession | AWS::EC2::TrafficMirrorTarget | AWS::EC2::TransitGateway | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::EC2::TransitGatewayRoute | AWS::EC2::TransitGatewayRouteTable | AWS::EC2::TransitGatewayRouteTableAssociation | AWS::EC2::TransitGatewayRouteTablePropagation | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::VPCPeeringConnection | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::ECR::PullThroughCacheRule | AWS::ECR::PublicRepository | AWS::ECR::RegistryPolicy | AWS::ECR::Repository | AWS::ECS::CapacityProvider | AWS::ECS::Cluster | AWS::ECS::PrimaryTaskSet | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::ECS::TaskSet | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EFS::MountTarget | AWS::EKS::Addon | AWS::EKS::Cluster | AWS::EKS::FargateProfile | AWS::EKS::IdentityProviderConfig | AWS::EKS::Nodegroup | AWS::ElastiCache::CacheCluster | AWS::ElastiCache::ParameterGroup | AWS::ElastiCache::ReplicationGroup | AWS::ElastiCache::SecurityGroupIngress | AWS::ElastiCache::SubnetGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::ElasticLoadBalancing::LoadBalancer | AWS::ElasticLoadBalancingV2::Listener | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::Elasticsearch::Domain | AWS::EMR::Cluster | AWS::EMR::InstanceFleetConfig | AWS::EMR::InstanceGroupConfig | AWS::EMR::SecurityConfiguration | AWS::EMR::Step | AWS::Events::ApiDestination | AWS::Events::Archive | AWS::Events::Connection | AWS::Events::Endpoint | AWS::Events::EventBus | AWS::Events::Rule | AWS::EventSchemas::Discoverer | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Schema | AWS::Evidently::Launch | AWS::Evidently::Project | AWS::FIS::ExperimentTemplate | AWS::Forecast::Dataset | AWS::Forecast::DatasetGroup | AWS::FraudDetector::EntityType | AWS::FraudDetector::Label | AWS::FraudDetector::Outcome | AWS::FraudDetector::Variable | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::Glue::Classifier | AWS::Glue::DevEndpoint | AWS::Glue::Job | AWS::Glue::MLTransform | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::Config | AWS::GroundStation::MissionProfile | AWS::GuardDuty::Detector | AWS::GuardDuty::Filter | AWS::GuardDuty::IPSet | AWS::GuardDuty::Master | AWS::GuardDuty::Member | AWS::GuardDuty::ThreatIntelSet | AWS::HealthLake::FHIRDatastore | AWS::IAM::Group | AWS::IAM::InstanceProfile | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::IAM::User | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::ImagePipeline | AWS::ImageBuilder::InfrastructureConfiguration | AWS::IoT::AccountAuditConfiguration | AWS::IoT::Authorizer | AWS::IoT::CACertificate | AWS::IoT::CustomMetric | AWS::IoT::Dimension | AWS::IoT::FleetMetric | AWS::IoT::MitigationAction | AWS::IoT::Policy | AWS::IoT::RoleAlias | AWS::IoT::ScheduledAudit | AWS::IoT::SecurityProfile | AWS::IoTAnalytics::Channel | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Datastore | AWS::IoTAnalytics::Pipeline | AWS::IoTEvents::AlarmModel | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::Input | AWS::IoTSiteWise::AssetModel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Gateway | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::Project | AWS::IoTTwinMaker::Entity | AWS::IoTTwinMaker::Scene | AWS::IoTTwinMaker::SyncJob | AWS::IoTTwinMaker::Workspace | AWS::IoTWireless::ServiceProfile | AWS::IVS::Channel | AWS::IVS::PlaybackKeyPair | AWS::IVS::RecordingConfiguration | AWS::KafkaConnect::Connector | AWS::Kendra::Index | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::KinesisAnalytics::Application | AWS::KinesisAnalytics::ApplicationOutput | AWS::KinesisAnalytics::ApplicationReferenceDataSource | AWS::KinesisAnalyticsV2::Application | AWS::KinesisAnalyticsV2::ApplicationCloudWatchLoggingOption | AWS::KinesisAnalyticsV2::ApplicationOutput | AWS::KinesisAnalyticsV2::ApplicationReferenceDataSource | AWS::KinesisFirehose::DeliveryStream | AWS::KinesisVideo::SignalingChannel | AWS::KinesisVideo::Stream | AWS::KMS::Alias | AWS::KMS::Key | AWS::Lambda::Alias | AWS::Lambda::CodeSigningConfig | AWS::Lambda::Function | AWS::Lex::Bot | AWS::Lex::BotAlias | AWS::LicenseManager::LicenseConfiguration | AWS::Lightsail::Bucket | AWS::Lightsail::Certificate | AWS::Lightsail::Disk | AWS::Lightsail::StaticIp | AWS::Logs::Destination | AWS::Logs::LogGroup | AWS::LookoutMetrics::Alert | AWS::LookoutVision::Project | AWS::Macie::Session | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaPackage::PackagingConfiguration | AWS::MediaPackage::PackagingGroup | AWS::MediaTailor::PlaybackConfiguration | AWS::MobileHub::Project | AWS::MSK::Cluster | AWS::MSK::Configuration | AWS::Neptune::DBCluster | AWS::Neptune::DBClusterParameterGroup | AWS::Neptune::DBInstance | AWS::Neptune::DBParameterGroup | AWS::Neptune::DBSubnetGroup | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::LoggingConfiguration | AWS::NetworkFirewall::RuleGroup | AWS::NetworkFirewall::TLSInspectionConfiguration | AWS::NetworkFirewall::VpcEndpointAssociation | AWS::NetworkManager::ConnectPeer | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::LinkAssociation | AWS::NetworkManager::Site | AWS::NetworkManager::TransitGatewayRegistration | AWS::OpenSearch::Domain | AWS::OpsWorks::Layer | AWS::OpsWorks::Stack | AWS::Panorama::Package | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::App | AWS::Pinpoint::ApplicationSettings | AWS::Pinpoint::Campaign | AWS::Pinpoint::EmailChannel | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::Pinpoint::InAppTemplate | AWS::Pinpoint::Segment | AWS::QLDB::Ledger | AWS::RAM::ResourceShare | AWS::RDS::DBCluster | AWS::RDS::DBClusterParameterGroup | AWS::RDS::DBClusterSnapshot | AWS::RDS::DBInstance | AWS::RDS::DBOptionGroup | AWS::RDS::DBParameterGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBSubnetGroup | AWS::RDS::EventSubscription | AWS::RDS::GlobalCluster | AWS::Redshift::Cluster | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::ResilienceHub::App | AWS::ResilienceHub::ResiliencyPolicy | AWS::ResourceExplorer2::Index | AWS::RoboMaker::RobotApplication | AWS::RoboMaker::RobotApplicationVersion | AWS::Redshift::ScheduledAction | AWS::RoboMaker::SimulationApplication | AWS::Route53::HealthCheck | AWS::Route53::HostedZone | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::Route53RecoveryReadiness::ResourceSet | AWS::Route53Resolver::FirewallDomainList | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::RUM::AppMonitor | AWS::S3::AccessPoint | AWS::S3::AccountPublicAccessBlock | AWS::S3::Bucket | AWS::S3::BucketPolicy | AWS::S3::MultiRegionAccessPoint | AWS::S3::StorageLens | AWS::SageMaker::AppImageConfig | AWS::SageMaker::CodeRepository | AWS::SageMaker::Domain | AWS::SageMaker::Endpoint | AWS::SageMaker::EndpointConfig | AWS::SageMaker::Image | AWS::SageMaker::Model | AWS::SageMaker::MonitoringSchedule | AWS::SageMaker::NotebookInstance | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::SageMaker::TrainingJob | AWS::SageMaker::WorkTeam | AWS::SageMaker::Workteam | AWS::SecretsManager::Secret | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::Portfolio | AWS::ServiceDiscovery::HttpNamespace | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::ServiceDiscovery::Service | AWS::SES::ConfigurationSet | AWS::SES::ContactList | AWS::SES::ReceiptFilter | AWS::SES::ReceiptRuleSet | AWS::SES::Template | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Signer::SigningProfile | AWS::SNS::Subscription | AWS::SNS::Topic | AWS::SQS::Queue | AWS::SSM::AssociationCompliance | AWS::SSM::Document | AWS::SSM::FileData | AWS::SSM::ManagedInstanceInventory | AWS::SSM::PatchCompliance | AWS::SSO::InstanceAccessControlAttributeConfiguration | AWS::SSO::PermissionSet | AWS::StepFunctions::Activity | AWS::StepFunctions::StateMachine | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::Transfer::Workflow | AWS::VPCFirewall::Firewall | AWS::VPCFirewall::FirewallPolicy | AWS::VPCFirewall::RuleGroup | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::WAFv2::IPSet | AWS::WAFv2::ManagedRuleSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::RuleGroup | AWS::WAFv2::WebACL | AWS::WorkSpaces::ConnectionAlias | AWS::WorkSpaces::Workspace | AWS::XRay::EncryptionConfig

Required: No

Configuration attributes that AWS Config returns for certain resource types to supplement the information returned for the configuration parameter.

Type: String to string map

Required: No

A mapping of key value tags associated with the resource.

Type: String to string map

Required: No

The version number of the resource configuration.

Type: String

Required: No