AssociateResourceTypes

$result = $client->associateResourceTypes([/* ... */]);
$promise = $client->associateResourceTypesAsync([/* ... */]);

Adds all resource types specified in the ResourceTypes list to the RecordingGroup of specified configuration recorder and includes those resource types when recording.

For this operation, the specified configuration recorder must use a RecordingStrategy that is either INCLUSION_BY_RESOURCE_TYPES or EXCLUSION_BY_RESOURCE_TYPES.

Parameter Syntax

$result = $client->associateResourceTypes([
    'ConfigurationRecorderArn' => '<string>', // REQUIRED
    'ResourceTypes' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[
    'ConfigurationRecorder' => [
        'arn' => '<string>',
        'name' => '<string>',
        'recordingGroup' => [
            'allSupported' => true || false,
            'exclusionByResourceTypes' => [
                'resourceTypes' => ['<string>', ...],
            ],
            'includeGlobalResourceTypes' => true || false,
            'recordingStrategy' => [
                'useOnly' => 'ALL_SUPPORTED_RESOURCE_TYPES|INCLUSION_BY_RESOURCE_TYPES|EXCLUSION_BY_RESOURCE_TYPES',
            ],
            'resourceTypes' => ['<string>', ...],
        ],
        'recordingMode' => [
            'recordingFrequency' => 'CONTINUOUS|DAILY',
            'recordingModeOverrides' => [
                [
                    'description' => '<string>',
                    'recordingFrequency' => 'CONTINUOUS|DAILY',
                    'resourceTypes' => ['<string>', ...],
                ],
                // ...
            ],
        ],
        'recordingScope' => 'INTERNAL|PAID',
        'roleARN' => '<string>',
        'servicePrincipal' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ConflictException:

For PutServiceLinkedConfigurationRecorder, you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.

For DeleteServiceLinkedConfigurationRecorder, you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.

For DeleteDeliveryChannel, you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the StopConfigurationRecorder operation to stop the customer managed configuration recorder.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.

• For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

BatchGetAggregateResourceConfig

$result = $client->batchGetAggregateResourceConfig([/* ... */]);
$promise = $client->batchGetAggregateResourceConfigAsync([/* ... */]);

Returns the current configuration items for resources that are present in your Config aggregator. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceIdentifiers list.

Parameter Syntax

$result = $client->batchGetAggregateResourceConfig([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'ResourceIdentifiers' => [ // REQUIRED
        [
            'ResourceId' => '<string>', // REQUIRED
            'ResourceName' => '<string>',
            'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
            'SourceAccountId' => '<string>', // REQUIRED
            'SourceRegion' => '<string>', // REQUIRED
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'BaseConfigurationItems' => [
        [
            'accountId' => '<string>',
            'arn' => '<string>',
            'availabilityZone' => '<string>',
            'awsRegion' => '<string>',
            'configuration' => '<string>',
            'configurationItemCaptureTime' => <DateTime>,
            'configurationItemDeliveryTime' => <DateTime>,
            'configurationItemStatus' => 'OK|ResourceDiscovered|ResourceNotRecorded|ResourceDeleted|ResourceDeletedNotRecorded',
            'configurationStateId' => '<string>',
            'recordingFrequency' => 'CONTINUOUS|DAILY',
            'resourceCreationTime' => <DateTime>,
            'resourceId' => '<string>',
            'resourceName' => '<string>',
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            'supplementaryConfiguration' => ['<string>', ...],
            'version' => '<string>',
        ],
        // ...
    ],
    'UnprocessedResourceIdentifiers' => [
        [
            'ResourceId' => '<string>',
            'ResourceName' => '<string>',
            'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            'SourceAccountId' => '<string>',
            'SourceRegion' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

BatchGetResourceConfig

$result = $client->batchGetResourceConfig([/* ... */]);
$promise = $client->batchGetResourceConfigAsync([/* ... */]);

Returns the BaseConfigurationItem for one or more requested resources. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceKeys list.

Parameter Syntax

$result = $client->batchGetResourceConfig([
    'resourceKeys' => [ // REQUIRED
        [
            'resourceId' => '<string>', // REQUIRED
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'baseConfigurationItems' => [
        [
            'accountId' => '<string>',
            'arn' => '<string>',
            'availabilityZone' => '<string>',
            'awsRegion' => '<string>',
            'configuration' => '<string>',
            'configurationItemCaptureTime' => <DateTime>,
            'configurationItemDeliveryTime' => <DateTime>,
            'configurationItemStatus' => 'OK|ResourceDiscovered|ResourceNotRecorded|ResourceDeleted|ResourceDeletedNotRecorded',
            'configurationStateId' => '<string>',
            'recordingFrequency' => 'CONTINUOUS|DAILY',
            'resourceCreationTime' => <DateTime>,
            'resourceId' => '<string>',
            'resourceName' => '<string>',
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            'supplementaryConfiguration' => ['<string>', ...],
            'version' => '<string>',
        ],
        // ...
    ],
    'unprocessedResourceKeys' => [
        [
            'resourceId' => '<string>',
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
        ],
        // ...
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

NoAvailableConfigurationRecorderException:

There are no customer managed configuration recorders available to record your resources. Use the PutConfigurationRecorder operation to create the customer managed configuration recorder.

DeleteAggregationAuthorization

$result = $client->deleteAggregationAuthorization([/* ... */]);
$promise = $client->deleteAggregationAuthorizationAsync([/* ... */]);

Deletes the authorization granted to the specified configuration aggregator account in a specified region.

Parameter Syntax

$result = $client->deleteAggregationAuthorization([
    'AuthorizedAccountId' => '<string>', // REQUIRED
    'AuthorizedAwsRegion' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DeleteConfigRule

$result = $client->deleteConfigRule([/* ... */]);
$promise = $client->deleteConfigRuleAsync([/* ... */]);

Deletes the specified Config rule and all of its evaluation results.

Config sets the state of a rule to DELETING until the deletion is complete. You cannot update a rule while it is in this state. If you make a PutConfigRule or DeleteConfigRule request for the rule, you will receive a ResourceInUseException.

You can check the state of a rule by using the DescribeConfigRules request.

Parameter Syntax

$result = $client->deleteConfigRule([
    'ConfigRuleName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

ResourceInUseException:

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.

• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.

• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.

• For PutConfigOrganizationRule, organization Config rule deletion is in progress. Try your request again later.

• For DeleteOrganizationConfigRule, organization Config rule creation is in progress. Try your request again later.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

DeleteConfigurationAggregator

$result = $client->deleteConfigurationAggregator([/* ... */]);
$promise = $client->deleteConfigurationAggregatorAsync([/* ... */]);

Deletes the specified configuration aggregator and the aggregated data associated with the aggregator.

Parameter Syntax

$result = $client->deleteConfigurationAggregator([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

DeleteConfigurationRecorder

$result = $client->deleteConfigurationRecorder([/* ... */]);
$promise = $client->deleteConfigurationRecorderAsync([/* ... */]);

Deletes the customer managed configuration recorder.

This operation does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the GetResourceConfigHistory operation, but you will not be able to access this information in the Config console until you have created a new customer managed configuration recorder.

Parameter Syntax

$result = $client->deleteConfigurationRecorder([
    'ConfigurationRecorderName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

UnmodifiableEntityException:

The requested operation is not valid.

For PutConfigurationRecorder, you will see this exception because you cannot use this operation to create a service-linked configuration recorder. Use the PutServiceLinkedConfigurationRecorder operation to create a service-linked configuration recorder.

For DeleteConfigurationRecorder, you will see this exception because you cannot use this operation to delete a service-linked configuration recorder. Use the DeleteServiceLinkedConfigurationRecorder operation to delete a service-linked configuration recorder.

For StartConfigurationRecorder and StopConfigurationRecorder, you will see this exception because these operations do not affect service-linked configuration recorders. Service-linked configuration recorders are always recording. To stop recording, you must delete the service-linked configuration recorder. Use the DeleteServiceLinkedConfigurationRecorder operation to delete a service-linked configuration recorder.

DeleteConformancePack

$result = $client->deleteConformancePack([/* ... */]);
$promise = $client->deleteConformancePackAsync([/* ... */]);

Deletes the specified conformance pack and all the Config rules, remediation actions, and all evaluation results within that conformance pack.

Config sets the conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.

Parameter Syntax

$result = $client->deleteConformancePack([
    'ConformancePackName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchConformancePackException:

You specified one or more conformance packs that do not exist.

ResourceInUseException:

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.

• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.

• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.

• For PutConfigOrganizationRule, organization Config rule deletion is in progress. Try your request again later.

• For DeleteOrganizationConfigRule, organization Config rule creation is in progress. Try your request again later.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

DeleteDeliveryChannel

$result = $client->deleteDeliveryChannel([/* ... */]);
$promise = $client->deleteDeliveryChannelAsync([/* ... */]);

Deletes the delivery channel.

Before you can delete the delivery channel, you must stop the customer managed configuration recorder. You can use the StopConfigurationRecorder operation to stop the customer managed configuration recorder.

Parameter Syntax

$result = $client->deleteDeliveryChannel([
    'DeliveryChannelName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchDeliveryChannelException:

You have specified a delivery channel that does not exist.

LastDeliveryChannelDeleteFailedException:

You cannot delete the delivery channel you specified because the customer managed configuration recorder is running.

DeleteEvaluationResults

$result = $client->deleteEvaluationResults([/* ... */]);
$promise = $client->deleteEvaluationResultsAsync([/* ... */]);

Deletes the evaluation results for the specified Config rule. You can specify one Config rule per request. After you delete the evaluation results, you can call the StartConfigRulesEvaluation API to start evaluating your Amazon Web Services resources against the rule.

Parameter Syntax

$result = $client->deleteEvaluationResults([
    'ConfigRuleName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

ResourceInUseException:

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.

• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.

• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.

• For PutConfigOrganizationRule, organization Config rule deletion is in progress. Try your request again later.

• For DeleteOrganizationConfigRule, organization Config rule creation is in progress. Try your request again later.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

DeleteOrganizationConfigRule

$result = $client->deleteOrganizationConfigRule([/* ... */]);
$promise = $client->deleteOrganizationConfigRuleAsync([/* ... */]);

Deletes the specified organization Config rule and all of its evaluation results from all member accounts in that organization.

Only a management account and a delegated administrator account can delete an organization Config rule. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added.

Config sets the state of a rule to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a rule while it is in this state.

Parameter Syntax

$result = $client->deleteOrganizationConfigRule([
    'OrganizationConfigRuleName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchOrganizationConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an organization Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

ResourceInUseException:

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.

• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.

• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.

• For PutConfigOrganizationRule, organization Config rule deletion is in progress. Try your request again later.

• For DeleteOrganizationConfigRule, organization Config rule creation is in progress. Try your request again later.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DeleteOrganizationConformancePack

$result = $client->deleteOrganizationConformancePack([/* ... */]);
$promise = $client->deleteOrganizationConformancePackAsync([/* ... */]);

Deletes the specified organization conformance pack and all of the Config rules and remediation actions from all member accounts in that organization.

Only a management account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Organizations ListDelegatedAdministrator permissions are added.

Config sets the state of a conformance pack to DELETE_IN_PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state.

Parameter Syntax

$result = $client->deleteOrganizationConformancePack([
    'OrganizationConformancePackName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchOrganizationConformancePackException:

Config organization conformance pack that you passed in the filter does not exist.

For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.

ResourceInUseException:

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.

• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.

• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.

• For PutConfigOrganizationRule, organization Config rule deletion is in progress. Try your request again later.

• For DeleteOrganizationConfigRule, organization Config rule creation is in progress. Try your request again later.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DeletePendingAggregationRequest

$result = $client->deletePendingAggregationRequest([/* ... */]);
$promise = $client->deletePendingAggregationRequestAsync([/* ... */]);

Deletes pending authorization requests for a specified aggregator account in a specified region.

Parameter Syntax

$result = $client->deletePendingAggregationRequest([
    'RequesterAccountId' => '<string>', // REQUIRED
    'RequesterAwsRegion' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DeleteRemediationConfiguration

$result = $client->deleteRemediationConfiguration([/* ... */]);
$promise = $client->deleteRemediationConfigurationAsync([/* ... */]);

Deletes the remediation configuration.

Parameter Syntax

$result = $client->deleteRemediationConfiguration([
    'ConfigRuleName' => '<string>', // REQUIRED
    'ResourceType' => '<string>',
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

NoSuchRemediationConfigurationException:

You specified an Config rule without a remediation configuration.

RemediationInProgressException:

Remediation action is in progress. You can either cancel execution in Amazon Web Services Systems Manager or wait and try again later.

InsufficientPermissionsException:

Indicates one of the following errors:

• For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.

• For PutConfigRule, the Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.

• For PutOrganizationConfigRule, organization Config rule cannot be created because you do not have permissions to call IAM GetRole action or create a service-linked role.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have the following permissions:

  • You do not have permission to call IAM GetRole action or create a service-linked role.

  • You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.

• For PutServiceLinkedConfigurationRecorder, a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM CreateServiceLinkedRole.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DeleteRemediationExceptions

$result = $client->deleteRemediationExceptions([/* ... */]);
$promise = $client->deleteRemediationExceptionsAsync([/* ... */]);

Deletes one or more remediation exceptions mentioned in the resource keys.

Parameter Syntax

$result = $client->deleteRemediationExceptions([
    'ConfigRuleName' => '<string>', // REQUIRED
    'ResourceKeys' => [ // REQUIRED
        [
            'ResourceId' => '<string>',
            'ResourceType' => '<string>',
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'FailedBatches' => [
        [
            'FailedItems' => [
                [
                    'ResourceId' => '<string>',
                    'ResourceType' => '<string>',
                ],
                // ...
            ],
            'FailureMessage' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchRemediationExceptionException:

You tried to delete a remediation exception that does not exist.

DeleteResourceConfig

$result = $client->deleteResourceConfig([/* ... */]);
$promise = $client->deleteResourceConfigAsync([/* ... */]);

Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your Config History.

Parameter Syntax

$result = $client->deleteResourceConfig([
    'ResourceId' => '<string>', // REQUIRED
    'ResourceType' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

NoRunningConfigurationRecorderException:

There is no configuration recorder running.

DeleteRetentionConfiguration

$result = $client->deleteRetentionConfiguration([/* ... */]);
$promise = $client->deleteRetentionConfigurationAsync([/* ... */]);

Deletes the retention configuration.

Parameter Syntax

$result = $client->deleteRetentionConfiguration([
    'RetentionConfigurationName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchRetentionConfigurationException:

You have specified a retention configuration that does not exist.

DeleteServiceLinkedConfigurationRecorder

$result = $client->deleteServiceLinkedConfigurationRecorder([/* ... */]);
$promise = $client->deleteServiceLinkedConfigurationRecorderAsync([/* ... */]);

Deletes an existing service-linked configuration recorder.

This operation does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the GetResourceConfigHistory operation, but you will not be able to access this information in the Config console until you have created a new service-linked configuration recorder for the same service.

Parameter Syntax

$result = $client->deleteServiceLinkedConfigurationRecorder([
    'ServicePrincipal' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Arn' => '<string>',
    'Name' => '<string>',
]

Result Details

Errors

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ConflictException:

For PutServiceLinkedConfigurationRecorder, you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.

For DeleteServiceLinkedConfigurationRecorder, you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.

For DeleteDeliveryChannel, you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the StopConfigurationRecorder operation to stop the customer managed configuration recorder.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.

• For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.

DeleteStoredQuery

$result = $client->deleteStoredQuery([/* ... */]);
$promise = $client->deleteStoredQueryAsync([/* ... */]);

Deletes the stored query for a single Amazon Web Services account and a single Amazon Web Services Region.

Parameter Syntax

$result = $client->deleteStoredQuery([
    'QueryName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ResourceNotFoundException:

You have specified a resource that does not exist.

DeliverConfigSnapshot

$result = $client->deliverConfigSnapshot([/* ... */]);
$promise = $client->deliverConfigSnapshotAsync([/* ... */]);

Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started, Config sends the following notifications using an Amazon SNS topic that you have specified.

• Notification of the start of the delivery.

• Notification of the completion of the delivery, if the delivery was successfully completed.

• Notification of delivery failure, if the delivery failed.

Parameter Syntax

$result = $client->deliverConfigSnapshot([
    'deliveryChannelName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'configSnapshotId' => '<string>',
]

Result Details

Errors

NoSuchDeliveryChannelException:

You have specified a delivery channel that does not exist.

NoAvailableConfigurationRecorderException:

There are no customer managed configuration recorders available to record your resources. Use the PutConfigurationRecorder operation to create the customer managed configuration recorder.

NoRunningConfigurationRecorderException:

There is no configuration recorder running.

DescribeAggregateComplianceByConfigRules

$result = $client->describeAggregateComplianceByConfigRules([/* ... */]);
$promise = $client->describeAggregateComplianceByConfigRulesAsync([/* ... */]);

Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. Does not display rules that do not have compliance results.

Parameter Syntax

$result = $client->describeAggregateComplianceByConfigRules([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'AwsRegion' => '<string>',
        'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
        'ConfigRuleName' => '<string>',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregateComplianceByConfigRules' => [
        [
            'AccountId' => '<string>',
            'AwsRegion' => '<string>',
            'Compliance' => [
                'ComplianceContributorCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
                'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            ],
            'ConfigRuleName' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

DescribeAggregateComplianceByConformancePacks

$result = $client->describeAggregateComplianceByConformancePacks([/* ... */]);
$promise = $client->describeAggregateComplianceByConformancePacksAsync([/* ... */]);

Returns a list of the existing and deleted conformance packs and their associated compliance status with the count of compliant and noncompliant Config rules within each conformance pack. Also returns the total rule count which includes compliant rules, noncompliant rules, and rules that cannot be evaluated due to insufficient data.

Parameter Syntax

$result = $client->describeAggregateComplianceByConformancePacks([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'AwsRegion' => '<string>',
        'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
        'ConformancePackName' => '<string>',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregateComplianceByConformancePacks' => [
        [
            'AccountId' => '<string>',
            'AwsRegion' => '<string>',
            'Compliance' => [
                'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
                'CompliantRuleCount' => <integer>,
                'NonCompliantRuleCount' => <integer>,
                'TotalRuleCount' => <integer>,
            ],
            'ConformancePackName' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

DescribeAggregationAuthorizations

$result = $client->describeAggregationAuthorizations([/* ... */]);
$promise = $client->describeAggregationAuthorizationsAsync([/* ... */]);

Returns a list of authorizations granted to various aggregator accounts and regions.

Parameter Syntax

$result = $client->describeAggregationAuthorizations([
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregationAuthorizations' => [
        [
            'AggregationAuthorizationArn' => '<string>',
            'AuthorizedAccountId' => '<string>',
            'AuthorizedAwsRegion' => '<string>',
            'CreationTime' => <DateTime>,
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

DescribeComplianceByConfigRule

$result = $client->describeComplianceByConfigRule([/* ... */]);
$promise = $client->describeComplianceByConfigRuleAsync([/* ... */]);

Indicates whether the specified Config rules are compliant. If a rule is noncompliant, this operation returns the number of Amazon Web Services resources that do not comply with the rule.

A rule is compliant if all of the evaluated resources comply with it. It is noncompliant if any of these resources do not comply.

If Config has no current evaluation results for the rule, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions:

• Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime.

• The rule's Lambda function is failing to send evaluation results to Config. Verify that the role you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission.

• The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.

Parameter Syntax

$result = $client->describeComplianceByConfigRule([
    'ComplianceTypes' => ['<string>', ...],
    'ConfigRuleNames' => ['<string>', ...],
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ComplianceByConfigRules' => [
        [
            'Compliance' => [
                'ComplianceContributorCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
                'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            ],
            'ConfigRuleName' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

DescribeComplianceByResource

$result = $client->describeComplianceByResource([/* ... */]);
$promise = $client->describeComplianceByResourceAsync([/* ... */]);

Indicates whether the specified Amazon Web Services resources are compliant. If a resource is noncompliant, this operation returns the number of Config rules that the resource does not comply with.

A resource is compliant if it complies with all the Config rules that evaluate it. It is noncompliant if it does not comply with one or more of these rules.

If Config has no current evaluation results for the resource, it returns INSUFFICIENT_DATA. This result might indicate one of the following conditions about the rules that evaluate the resource:

• Config has never invoked an evaluation for the rule. To check whether it has, use the DescribeConfigRuleEvaluationStatus action to get the LastSuccessfulInvocationTime and LastFailedInvocationTime.

• The rule's Lambda function is failing to send evaluation results to Config. Verify that the role that you assigned to your configuration recorder includes the config:PutEvaluations permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations permission.

• The rule's Lambda function has returned NOT_APPLICABLE for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.

Parameter Syntax

$result = $client->describeComplianceByResource([
    'ComplianceTypes' => ['<string>', ...],
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'ResourceId' => '<string>',
    'ResourceType' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ComplianceByResources' => [
        [
            'Compliance' => [
                'ComplianceContributorCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
                'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            ],
            'ResourceId' => '<string>',
            'ResourceType' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

DescribeConfigRuleEvaluationStatus

$result = $client->describeConfigRuleEvaluationStatus([/* ... */]);
$promise = $client->describeConfigRuleEvaluationStatusAsync([/* ... */]);

Returns status information for each of your Config managed rules. The status includes information such as the last time Config invoked the rule, the last time Config failed to invoke the rule, and the related error for the last failure.

Parameter Syntax

$result = $client->describeConfigRuleEvaluationStatus([
    'ConfigRuleNames' => ['<string>', ...],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigRulesEvaluationStatus' => [
        [
            'ConfigRuleArn' => '<string>',
            'ConfigRuleId' => '<string>',
            'ConfigRuleName' => '<string>',
            'FirstActivatedTime' => <DateTime>,
            'FirstEvaluationStarted' => true || false,
            'LastDeactivatedTime' => <DateTime>,
            'LastDebugLogDeliveryStatus' => '<string>',
            'LastDebugLogDeliveryStatusReason' => '<string>',
            'LastDebugLogDeliveryTime' => <DateTime>,
            'LastErrorCode' => '<string>',
            'LastErrorMessage' => '<string>',
            'LastFailedEvaluationTime' => <DateTime>,
            'LastFailedInvocationTime' => <DateTime>,
            'LastSuccessfulEvaluationTime' => <DateTime>,
            'LastSuccessfulInvocationTime' => <DateTime>,
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

DescribeConfigRules

$result = $client->describeConfigRules([/* ... */]);
$promise = $client->describeConfigRulesAsync([/* ... */]);

Returns details about your Config rules.

Parameter Syntax

$result = $client->describeConfigRules([
    'ConfigRuleNames' => ['<string>', ...],
    'Filters' => [
        'EvaluationMode' => 'DETECTIVE|PROACTIVE',
    ],
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigRules' => [
        [
            'ConfigRuleArn' => '<string>',
            'ConfigRuleId' => '<string>',
            'ConfigRuleName' => '<string>',
            'ConfigRuleState' => 'ACTIVE|DELETING|DELETING_RESULTS|EVALUATING',
            'CreatedBy' => '<string>',
            'Description' => '<string>',
            'EvaluationModes' => [
                [
                    'Mode' => 'DETECTIVE|PROACTIVE',
                ],
                // ...
            ],
            'InputParameters' => '<string>',
            'MaximumExecutionFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
            'Scope' => [
                'ComplianceResourceId' => '<string>',
                'ComplianceResourceTypes' => ['<string>', ...],
                'TagKey' => '<string>',
                'TagValue' => '<string>',
            ],
            'Source' => [
                'CustomPolicyDetails' => [
                    'EnableDebugLogDelivery' => true || false,
                    'PolicyRuntime' => '<string>',
                    'PolicyText' => '<string>',
                ],
                'Owner' => 'CUSTOM_LAMBDA|AWS|CUSTOM_POLICY',
                'SourceDetails' => [
                    [
                        'EventSource' => 'aws.config',
                        'MaximumExecutionFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
                        'MessageType' => 'ConfigurationItemChangeNotification|ConfigurationSnapshotDeliveryCompleted|ScheduledNotification|OversizedConfigurationItemChangeNotification',
                    ],
                    // ...
                ],
                'SourceIdentifier' => '<string>',
            ],
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DescribeConfigurationAggregatorSourcesStatus

$result = $client->describeConfigurationAggregatorSourcesStatus([/* ... */]);
$promise = $client->describeConfigurationAggregatorSourcesStatusAsync([/* ... */]);

Returns status information for sources within an aggregator. The status includes information about the last time Config verified authorization between the source account and an aggregator account. In case of a failure, the status contains the related error code or message.

Parameter Syntax

$result = $client->describeConfigurationAggregatorSourcesStatus([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'UpdateStatus' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'AggregatedSourceStatusList' => [
        [
            'AwsRegion' => '<string>',
            'LastErrorCode' => '<string>',
            'LastErrorMessage' => '<string>',
            'LastUpdateStatus' => 'FAILED|SUCCEEDED|OUTDATED',
            'LastUpdateTime' => <DateTime>,
            'SourceId' => '<string>',
            'SourceType' => 'ACCOUNT|ORGANIZATION',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

DescribeConfigurationAggregators

$result = $client->describeConfigurationAggregators([/* ... */]);
$promise = $client->describeConfigurationAggregatorsAsync([/* ... */]);

Returns the details of one or more configuration aggregators. If the configuration aggregator is not specified, this operation returns the details for all the configuration aggregators associated with the account.

Parameter Syntax

$result = $client->describeConfigurationAggregators([
    'ConfigurationAggregatorNames' => ['<string>', ...],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigurationAggregators' => [
        [
            'AccountAggregationSources' => [
                [
                    'AccountIds' => ['<string>', ...],
                    'AllAwsRegions' => true || false,
                    'AwsRegions' => ['<string>', ...],
                ],
                // ...
            ],
            'AggregatorFilters' => [
                'ResourceType' => [
                    'Type' => 'INCLUDE',
                    'Value' => ['<string>', ...],
                ],
                'ServicePrincipal' => [
                    'Type' => 'INCLUDE',
                    'Value' => ['<string>', ...],
                ],
            ],
            'ConfigurationAggregatorArn' => '<string>',
            'ConfigurationAggregatorName' => '<string>',
            'CreatedBy' => '<string>',
            'CreationTime' => <DateTime>,
            'LastUpdatedTime' => <DateTime>,
            'OrganizationAggregationSource' => [
                'AllAwsRegions' => true || false,
                'AwsRegions' => ['<string>', ...],
                'RoleArn' => '<string>',
            ],
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

DescribeConfigurationRecorderStatus

$result = $client->describeConfigurationRecorderStatus([/* ... */]);
$promise = $client->describeConfigurationRecorderStatusAsync([/* ... */]);

Returns the current status of the configuration recorder you specify as well as the status of the last recording event for the configuration recorders.

For a detailed status of recording events over time, add your Config events to Amazon CloudWatch metrics and use CloudWatch metrics.

If a configuration recorder is not specified, this operation returns the status for the customer managed configuration recorder configured for the account, if applicable.

Parameter Syntax

$result = $client->describeConfigurationRecorderStatus([
    'Arn' => '<string>',
    'ConfigurationRecorderNames' => ['<string>', ...],
    'ServicePrincipal' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigurationRecordersStatus' => [
        [
            'arn' => '<string>',
            'lastErrorCode' => '<string>',
            'lastErrorMessage' => '<string>',
            'lastStartTime' => <DateTime>,
            'lastStatus' => 'Pending|Success|Failure|NotApplicable',
            'lastStatusChangeTime' => <DateTime>,
            'lastStopTime' => <DateTime>,
            'name' => '<string>',
            'recording' => true || false,
            'servicePrincipal' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

DescribeConfigurationRecorders

$result = $client->describeConfigurationRecorders([/* ... */]);
$promise = $client->describeConfigurationRecordersAsync([/* ... */]);

Returns details for the configuration recorder you specify.

If a configuration recorder is not specified, this operation returns details for the customer managed configuration recorder configured for the account, if applicable.

Parameter Syntax

$result = $client->describeConfigurationRecorders([
    'Arn' => '<string>',
    'ConfigurationRecorderNames' => ['<string>', ...],
    'ServicePrincipal' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigurationRecorders' => [
        [
            'arn' => '<string>',
            'name' => '<string>',
            'recordingGroup' => [
                'allSupported' => true || false,
                'exclusionByResourceTypes' => [
                    'resourceTypes' => ['<string>', ...],
                ],
                'includeGlobalResourceTypes' => true || false,
                'recordingStrategy' => [
                    'useOnly' => 'ALL_SUPPORTED_RESOURCE_TYPES|INCLUSION_BY_RESOURCE_TYPES|EXCLUSION_BY_RESOURCE_TYPES',
                ],
                'resourceTypes' => ['<string>', ...],
            ],
            'recordingMode' => [
                'recordingFrequency' => 'CONTINUOUS|DAILY',
                'recordingModeOverrides' => [
                    [
                        'description' => '<string>',
                        'recordingFrequency' => 'CONTINUOUS|DAILY',
                        'resourceTypes' => ['<string>', ...],
                    ],
                    // ...
                ],
            ],
            'recordingScope' => 'INTERNAL|PAID',
            'roleARN' => '<string>',
            'servicePrincipal' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

DescribeConformancePackCompliance

$result = $client->describeConformancePackCompliance([/* ... */]);
$promise = $client->describeConformancePackComplianceAsync([/* ... */]);

Returns compliance details for each rule in that conformance pack.

Parameter Syntax

$result = $client->describeConformancePackCompliance([
    'ConformancePackName' => '<string>', // REQUIRED
    'Filters' => [
        'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
        'ConfigRuleNames' => ['<string>', ...],
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConformancePackName' => '<string>',
    'ConformancePackRuleComplianceList' => [
        [
            'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
            'ConfigRuleName' => '<string>',
            'Controls' => ['<string>', ...],
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchConfigRuleInConformancePackException:

Config rule that you passed in the filter does not exist.

NoSuchConformancePackException:

You specified one or more conformance packs that do not exist.

DescribeConformancePackStatus

$result = $client->describeConformancePackStatus([/* ... */]);
$promise = $client->describeConformancePackStatusAsync([/* ... */]);

Provides one or more conformance packs deployment status.

Parameter Syntax

$result = $client->describeConformancePackStatus([
    'ConformancePackNames' => ['<string>', ...],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConformancePackStatusDetails' => [
        [
            'ConformancePackArn' => '<string>',
            'ConformancePackId' => '<string>',
            'ConformancePackName' => '<string>',
            'ConformancePackState' => 'CREATE_IN_PROGRESS|CREATE_COMPLETE|CREATE_FAILED|DELETE_IN_PROGRESS|DELETE_FAILED',
            'ConformancePackStatusReason' => '<string>',
            'LastUpdateCompletedTime' => <DateTime>,
            'LastUpdateRequestedTime' => <DateTime>,
            'StackArn' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DescribeConformancePacks

$result = $client->describeConformancePacks([/* ... */]);
$promise = $client->describeConformancePacksAsync([/* ... */]);

Returns a list of one or more conformance packs.

Parameter Syntax

$result = $client->describeConformancePacks([
    'ConformancePackNames' => ['<string>', ...],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConformancePackDetails' => [
        [
            'ConformancePackArn' => '<string>',
            'ConformancePackId' => '<string>',
            'ConformancePackInputParameters' => [
                [
                    'ParameterName' => '<string>',
                    'ParameterValue' => '<string>',
                ],
                // ...
            ],
            'ConformancePackName' => '<string>',
            'CreatedBy' => '<string>',
            'DeliveryS3Bucket' => '<string>',
            'DeliveryS3KeyPrefix' => '<string>',
            'LastUpdateRequestedTime' => <DateTime>,
            'TemplateSSMDocumentDetails' => [
                'DocumentName' => '<string>',
                'DocumentVersion' => '<string>',
            ],
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

NoSuchConformancePackException:

You specified one or more conformance packs that do not exist.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DescribeDeliveryChannelStatus

$result = $client->describeDeliveryChannelStatus([/* ... */]);
$promise = $client->describeDeliveryChannelStatusAsync([/* ... */]);

Returns the current status of the specified delivery channel. If a delivery channel is not specified, this operation returns the current status of all delivery channels associated with the account.

Parameter Syntax

$result = $client->describeDeliveryChannelStatus([
    'DeliveryChannelNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'DeliveryChannelsStatus' => [
        [
            'configHistoryDeliveryInfo' => [
                'lastAttemptTime' => <DateTime>,
                'lastErrorCode' => '<string>',
                'lastErrorMessage' => '<string>',
                'lastStatus' => 'Success|Failure|Not_Applicable',
                'lastSuccessfulTime' => <DateTime>,
                'nextDeliveryTime' => <DateTime>,
            ],
            'configSnapshotDeliveryInfo' => [
                'lastAttemptTime' => <DateTime>,
                'lastErrorCode' => '<string>',
                'lastErrorMessage' => '<string>',
                'lastStatus' => 'Success|Failure|Not_Applicable',
                'lastSuccessfulTime' => <DateTime>,
                'nextDeliveryTime' => <DateTime>,
            ],
            'configStreamDeliveryInfo' => [
                'lastErrorCode' => '<string>',
                'lastErrorMessage' => '<string>',
                'lastStatus' => 'Success|Failure|Not_Applicable',
                'lastStatusChangeTime' => <DateTime>,
            ],
            'name' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchDeliveryChannelException:

You have specified a delivery channel that does not exist.

DescribeDeliveryChannels

$result = $client->describeDeliveryChannels([/* ... */]);
$promise = $client->describeDeliveryChannelsAsync([/* ... */]);

Returns details about the specified delivery channel. If a delivery channel is not specified, this operation returns the details of all delivery channels associated with the account.

Parameter Syntax

$result = $client->describeDeliveryChannels([
    'DeliveryChannelNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'DeliveryChannels' => [
        [
            'configSnapshotDeliveryProperties' => [
                'deliveryFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
            ],
            'name' => '<string>',
            's3BucketName' => '<string>',
            's3KeyPrefix' => '<string>',
            's3KmsKeyArn' => '<string>',
            'snsTopicARN' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchDeliveryChannelException:

You have specified a delivery channel that does not exist.

DescribeOrganizationConfigRuleStatuses

$result = $client->describeOrganizationConfigRuleStatuses([/* ... */]);
$promise = $client->describeOrganizationConfigRuleStatusesAsync([/* ... */]);

Provides organization Config rule deployment status for an organization.

Parameter Syntax

$result = $client->describeOrganizationConfigRuleStatuses([
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConfigRuleNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConfigRuleStatuses' => [
        [
            'ErrorCode' => '<string>',
            'ErrorMessage' => '<string>',
            'LastUpdateTime' => <DateTime>,
            'OrganizationConfigRuleName' => '<string>',
            'OrganizationRuleStatus' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an organization Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DescribeOrganizationConfigRules

$result = $client->describeOrganizationConfigRules([/* ... */]);
$promise = $client->describeOrganizationConfigRulesAsync([/* ... */]);

Returns a list of organization Config rules.

Parameter Syntax

$result = $client->describeOrganizationConfigRules([
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConfigRuleNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConfigRules' => [
        [
            'ExcludedAccounts' => ['<string>', ...],
            'LastUpdateTime' => <DateTime>,
            'OrganizationConfigRuleArn' => '<string>',
            'OrganizationConfigRuleName' => '<string>',
            'OrganizationCustomPolicyRuleMetadata' => [
                'DebugLogDeliveryAccounts' => ['<string>', ...],
                'Description' => '<string>',
                'InputParameters' => '<string>',
                'MaximumExecutionFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
                'OrganizationConfigRuleTriggerTypes' => ['<string>', ...],
                'PolicyRuntime' => '<string>',
                'ResourceIdScope' => '<string>',
                'ResourceTypesScope' => ['<string>', ...],
                'TagKeyScope' => '<string>',
                'TagValueScope' => '<string>',
            ],
            'OrganizationCustomRuleMetadata' => [
                'Description' => '<string>',
                'InputParameters' => '<string>',
                'LambdaFunctionArn' => '<string>',
                'MaximumExecutionFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
                'OrganizationConfigRuleTriggerTypes' => ['<string>', ...],
                'ResourceIdScope' => '<string>',
                'ResourceTypesScope' => ['<string>', ...],
                'TagKeyScope' => '<string>',
                'TagValueScope' => '<string>',
            ],
            'OrganizationManagedRuleMetadata' => [
                'Description' => '<string>',
                'InputParameters' => '<string>',
                'MaximumExecutionFrequency' => 'One_Hour|Three_Hours|Six_Hours|Twelve_Hours|TwentyFour_Hours',
                'ResourceIdScope' => '<string>',
                'ResourceTypesScope' => ['<string>', ...],
                'RuleIdentifier' => '<string>',
                'TagKeyScope' => '<string>',
                'TagValueScope' => '<string>',
            ],
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an organization Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DescribeOrganizationConformancePackStatuses

$result = $client->describeOrganizationConformancePackStatuses([/* ... */]);
$promise = $client->describeOrganizationConformancePackStatusesAsync([/* ... */]);

Provides organization conformance pack deployment status for an organization.

Parameter Syntax

$result = $client->describeOrganizationConformancePackStatuses([
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConformancePackNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConformancePackStatuses' => [
        [
            'ErrorCode' => '<string>',
            'ErrorMessage' => '<string>',
            'LastUpdateTime' => <DateTime>,
            'OrganizationConformancePackName' => '<string>',
            'Status' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConformancePackException:

Config organization conformance pack that you passed in the filter does not exist.

For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DescribeOrganizationConformancePacks

$result = $client->describeOrganizationConformancePacks([/* ... */]);
$promise = $client->describeOrganizationConformancePacksAsync([/* ... */]);

Returns a list of organization conformance packs.

Parameter Syntax

$result = $client->describeOrganizationConformancePacks([
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConformancePackNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConformancePacks' => [
        [
            'ConformancePackInputParameters' => [
                [
                    'ParameterName' => '<string>',
                    'ParameterValue' => '<string>',
                ],
                // ...
            ],
            'DeliveryS3Bucket' => '<string>',
            'DeliveryS3KeyPrefix' => '<string>',
            'ExcludedAccounts' => ['<string>', ...],
            'LastUpdateTime' => <DateTime>,
            'OrganizationConformancePackArn' => '<string>',
            'OrganizationConformancePackName' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConformancePackException:

Config organization conformance pack that you passed in the filter does not exist.

For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

DescribePendingAggregationRequests

$result = $client->describePendingAggregationRequests([/* ... */]);
$promise = $client->describePendingAggregationRequestsAsync([/* ... */]);

Returns a list of all pending aggregation requests.

Parameter Syntax

$result = $client->describePendingAggregationRequests([
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'PendingAggregationRequests' => [
        [
            'RequesterAccountId' => '<string>',
            'RequesterAwsRegion' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidLimitException:

The specified limit is outside the allowable range.

DescribeRemediationConfigurations

$result = $client->describeRemediationConfigurations([/* ... */]);
$promise = $client->describeRemediationConfigurationsAsync([/* ... */]);

Returns the details of one or more remediation configurations.

Parameter Syntax

$result = $client->describeRemediationConfigurations([
    'ConfigRuleNames' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[
    'RemediationConfigurations' => [
        [
            'Arn' => '<string>',
            'Automatic' => true || false,
            'ConfigRuleName' => '<string>',
            'CreatedByService' => '<string>',
            'ExecutionControls' => [
                'SsmControls' => [
                    'ConcurrentExecutionRatePercentage' => <integer>,
                    'ErrorPercentage' => <integer>,
                ],
            ],
            'MaximumAutomaticAttempts' => <integer>,
            'Parameters' => [
                '<StringWithCharLimit256>' => [
                    'ResourceValue' => [
                        'Value' => 'RESOURCE_ID',
                    ],
                    'StaticValue' => [
                        'Values' => ['<string>', ...],
                    ],
                ],
                // ...
            ],
            'ResourceType' => '<string>',
            'RetryAttemptSeconds' => <integer>,
            'TargetId' => '<string>',
            'TargetType' => 'SSM_DOCUMENT',
            'TargetVersion' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

There are no errors described for this operation.

DescribeRemediationExceptions

$result = $client->describeRemediationExceptions([/* ... */]);
$promise = $client->describeRemediationExceptionsAsync([/* ... */]);

Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response.

Parameter Syntax

$result = $client->describeRemediationExceptions([
    'ConfigRuleName' => '<string>', // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'ResourceKeys' => [
        [
            'ResourceId' => '<string>',
            'ResourceType' => '<string>',
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'RemediationExceptions' => [
        [
            'ConfigRuleName' => '<string>',
            'ExpirationTime' => <DateTime>,
            'Message' => '<string>',
            'ResourceId' => '<string>',
            'ResourceType' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DescribeRemediationExecutionStatus

$result = $client->describeRemediationExecutionStatus([/* ... */]);
$promise = $client->describeRemediationExecutionStatusAsync([/* ... */]);

Provides a detailed view of a Remediation Execution for a set of resources including state, timestamps for when steps for the remediation execution occur, and any error messages for steps that have failed. When you specify the limit and the next token, you receive a paginated response.

Parameter Syntax

$result = $client->describeRemediationExecutionStatus([
    'ConfigRuleName' => '<string>', // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'ResourceKeys' => [
        [
            'resourceId' => '<string>', // REQUIRED
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
        ],
        // ...
    ],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'RemediationExecutionStatuses' => [
        [
            'InvocationTime' => <DateTime>,
            'LastUpdatedTime' => <DateTime>,
            'ResourceKey' => [
                'resourceId' => '<string>',
                'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            ],
            'State' => 'QUEUED|IN_PROGRESS|SUCCEEDED|FAILED',
            'StepDetails' => [
                [
                    'ErrorMessage' => '<string>',
                    'Name' => '<string>',
                    'StartTime' => <DateTime>,
                    'State' => 'SUCCEEDED|PENDING|FAILED',
                    'StopTime' => <DateTime>,
                ],
                // ...
            ],
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchRemediationConfigurationException:

You specified an Config rule without a remediation configuration.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

DescribeRetentionConfigurations

$result = $client->describeRetentionConfigurations([/* ... */]);
$promise = $client->describeRetentionConfigurationsAsync([/* ... */]);

Returns the details of one or more retention configurations. If the retention configuration name is not specified, this operation returns the details for all the retention configurations for that account.

Parameter Syntax

$result = $client->describeRetentionConfigurations([
    'NextToken' => '<string>',
    'RetentionConfigurationNames' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'RetentionConfigurations' => [
        [
            'Name' => '<string>',
            'RetentionPeriodInDays' => <integer>,
        ],
        // ...
    ],
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

NoSuchRetentionConfigurationException:

You have specified a retention configuration that does not exist.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

DisassociateResourceTypes

$result = $client->disassociateResourceTypes([/* ... */]);
$promise = $client->disassociateResourceTypesAsync([/* ... */]);

Removes all resource types specified in the ResourceTypes list from the RecordingGroup of configuration recorder and excludes these resource types when recording.

For this operation, the configuration recorder must use a RecordingStrategy that is either INCLUSION_BY_RESOURCE_TYPES or EXCLUSION_BY_RESOURCE_TYPES.

Parameter Syntax

$result = $client->disassociateResourceTypes([
    'ConfigurationRecorderArn' => '<string>', // REQUIRED
    'ResourceTypes' => ['<string>', ...], // REQUIRED
]);

Parameter Details

Result Syntax

[
    'ConfigurationRecorder' => [
        'arn' => '<string>',
        'name' => '<string>',
        'recordingGroup' => [
            'allSupported' => true || false,
            'exclusionByResourceTypes' => [
                'resourceTypes' => ['<string>', ...],
            ],
            'includeGlobalResourceTypes' => true || false,
            'recordingStrategy' => [
                'useOnly' => 'ALL_SUPPORTED_RESOURCE_TYPES|INCLUSION_BY_RESOURCE_TYPES|EXCLUSION_BY_RESOURCE_TYPES',
            ],
            'resourceTypes' => ['<string>', ...],
        ],
        'recordingMode' => [
            'recordingFrequency' => 'CONTINUOUS|DAILY',
            'recordingModeOverrides' => [
                [
                    'description' => '<string>',
                    'recordingFrequency' => 'CONTINUOUS|DAILY',
                    'resourceTypes' => ['<string>', ...],
                ],
                // ...
            ],
        ],
        'recordingScope' => 'INTERNAL|PAID',
        'roleARN' => '<string>',
        'servicePrincipal' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ConflictException:

For PutServiceLinkedConfigurationRecorder, you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.

For DeleteServiceLinkedConfigurationRecorder, you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.

For DeleteDeliveryChannel, you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the StopConfigurationRecorder operation to stop the customer managed configuration recorder.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.

• For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.

NoSuchConfigurationRecorderException:

You have specified a configuration recorder that does not exist.

GetAggregateComplianceDetailsByConfigRule

$result = $client->getAggregateComplianceDetailsByConfigRule([/* ... */]);
$promise = $client->getAggregateComplianceDetailsByConfigRuleAsync([/* ... */]);

Returns the evaluation results for the specified Config rule for a specific resource in a rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.

Parameter Syntax

$result = $client->getAggregateComplianceDetailsByConfigRule([
    'AccountId' => '<string>', // REQUIRED
    'AwsRegion' => '<string>', // REQUIRED
    'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
    'ConfigRuleName' => '<string>', // REQUIRED
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregateEvaluationResults' => [
        [
            'AccountId' => '<string>',
            'Annotation' => '<string>',
            'AwsRegion' => '<string>',
            'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            'ConfigRuleInvokedTime' => <DateTime>,
            'EvaluationResultIdentifier' => [
                'EvaluationResultQualifier' => [
                    'ConfigRuleName' => '<string>',
                    'EvaluationMode' => 'DETECTIVE|PROACTIVE',
                    'ResourceId' => '<string>',
                    'ResourceType' => '<string>',
                ],
                'OrderingTimestamp' => <DateTime>,
                'ResourceEvaluationId' => '<string>',
            ],
            'ResultRecordedTime' => <DateTime>,
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

GetAggregateConfigRuleComplianceSummary

$result = $client->getAggregateConfigRuleComplianceSummary([/* ... */]);
$promise = $client->getAggregateConfigRuleComplianceSummaryAsync([/* ... */]);

Returns the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator.

Parameter Syntax

$result = $client->getAggregateConfigRuleComplianceSummary([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'AwsRegion' => '<string>',
    ],
    'GroupByKey' => 'ACCOUNT_ID|AWS_REGION',
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregateComplianceCounts' => [
        [
            'ComplianceSummary' => [
                'ComplianceSummaryTimestamp' => <DateTime>,
                'CompliantResourceCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
                'NonCompliantResourceCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
            ],
            'GroupName' => '<string>',
        ],
        // ...
    ],
    'GroupByKey' => '<string>',
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

GetAggregateConformancePackComplianceSummary

$result = $client->getAggregateConformancePackComplianceSummary([/* ... */]);
$promise = $client->getAggregateConformancePackComplianceSummaryAsync([/* ... */]);

Returns the count of compliant and noncompliant conformance packs across all Amazon Web Services accounts and Amazon Web Services Regions in an aggregator. You can filter based on Amazon Web Services account ID or Amazon Web Services Region.

Parameter Syntax

$result = $client->getAggregateConformancePackComplianceSummary([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'AwsRegion' => '<string>',
    ],
    'GroupByKey' => 'ACCOUNT_ID|AWS_REGION',
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'AggregateConformancePackComplianceSummaries' => [
        [
            'ComplianceSummary' => [
                'CompliantConformancePackCount' => <integer>,
                'NonCompliantConformancePackCount' => <integer>,
            ],
            'GroupName' => '<string>',
        ],
        // ...
    ],
    'GroupByKey' => '<string>',
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

GetAggregateDiscoveredResourceCounts

$result = $client->getAggregateDiscoveredResourceCounts([/* ... */]);
$promise = $client->getAggregateDiscoveredResourceCountsAsync([/* ... */]);

Returns the resource counts across accounts and regions that are present in your Config aggregator. You can request the resource counts by providing filters and GroupByKey.

For example, if the input contains accountID 12345678910 and region us-east-1 in filters, the API returns the count of resources in account ID 12345678910 and region us-east-1. If the input contains ACCOUNT_ID as a GroupByKey, the API returns resource counts for all source accounts that are present in your aggregator.

Parameter Syntax

$result = $client->getAggregateDiscoveredResourceCounts([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'Region' => '<string>',
        'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
    ],
    'GroupByKey' => 'RESOURCE_TYPE|ACCOUNT_ID|AWS_REGION',
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'GroupByKey' => '<string>',
    'GroupedResourceCounts' => [
        [
            'GroupName' => '<string>',
            'ResourceCount' => <integer>,
        ],
        // ...
    ],
    'NextToken' => '<string>',
    'TotalDiscoveredResources' => <integer>,
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

GetAggregateResourceConfig

$result = $client->getAggregateResourceConfig([/* ... */]);
$promise = $client->getAggregateResourceConfigAsync([/* ... */]);

Returns configuration item that is aggregated for your specific resource in a specific source account and region.

Parameter Syntax

$result = $client->getAggregateResourceConfig([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'ResourceIdentifier' => [ // REQUIRED
        'ResourceId' => '<string>', // REQUIRED
        'ResourceName' => '<string>',
        'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
        'SourceAccountId' => '<string>', // REQUIRED
        'SourceRegion' => '<string>', // REQUIRED
    ],
]);

Parameter Details

Result Syntax

[
    'ConfigurationItem' => [
        'accountId' => '<string>',
        'arn' => '<string>',
        'availabilityZone' => '<string>',
        'awsRegion' => '<string>',
        'configuration' => '<string>',
        'configurationItemCaptureTime' => <DateTime>,
        'configurationItemDeliveryTime' => <DateTime>,
        'configurationItemMD5Hash' => '<string>',
        'configurationItemStatus' => 'OK|ResourceDiscovered|ResourceNotRecorded|ResourceDeleted|ResourceDeletedNotRecorded',
        'configurationStateId' => '<string>',
        'recordingFrequency' => 'CONTINUOUS|DAILY',
        'relatedEvents' => ['<string>', ...],
        'relationships' => [
            [
                'relationshipName' => '<string>',
                'resourceId' => '<string>',
                'resourceName' => '<string>',
                'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            ],
            // ...
        ],
        'resourceCreationTime' => <DateTime>,
        'resourceId' => '<string>',
        'resourceName' => '<string>',
        'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
        'supplementaryConfiguration' => ['<string>', ...],
        'tags' => ['<string>', ...],
        'version' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

OversizedConfigurationItemException:

The configuration item size is outside the allowable range.

ResourceNotDiscoveredException:

You have specified a resource that is either unknown or has not been discovered.

GetComplianceDetailsByConfigRule

$result = $client->getComplianceDetailsByConfigRule([/* ... */]);
$promise = $client->getComplianceDetailsByConfigRuleAsync([/* ... */]);

Returns the evaluation results for the specified Config rule. The results indicate which Amazon Web Services resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.

Parameter Syntax

$result = $client->getComplianceDetailsByConfigRule([
    'ComplianceTypes' => ['<string>', ...],
    'ConfigRuleName' => '<string>', // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'EvaluationResults' => [
        [
            'Annotation' => '<string>',
            'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            'ConfigRuleInvokedTime' => <DateTime>,
            'EvaluationResultIdentifier' => [
                'EvaluationResultQualifier' => [
                    'ConfigRuleName' => '<string>',
                    'EvaluationMode' => 'DETECTIVE|PROACTIVE',
                    'ResourceId' => '<string>',
                    'ResourceType' => '<string>',
                ],
                'OrderingTimestamp' => <DateTime>,
                'ResourceEvaluationId' => '<string>',
            ],
            'ResultRecordedTime' => <DateTime>,
            'ResultToken' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

GetComplianceDetailsByResource

$result = $client->getComplianceDetailsByResource([/* ... */]);
$promise = $client->getComplianceDetailsByResourceAsync([/* ... */]);

Returns the evaluation results for the specified Amazon Web Services resource. The results indicate which Config rules were used to evaluate the resource, when each rule was last invoked, and whether the resource complies with each rule.

Parameter Syntax

$result = $client->getComplianceDetailsByResource([
    'ComplianceTypes' => ['<string>', ...],
    'NextToken' => '<string>',
    'ResourceEvaluationId' => '<string>',
    'ResourceId' => '<string>',
    'ResourceType' => '<string>',
]);

Parameter Details

Result Syntax

[
    'EvaluationResults' => [
        [
            'Annotation' => '<string>',
            'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
            'ConfigRuleInvokedTime' => <DateTime>,
            'EvaluationResultIdentifier' => [
                'EvaluationResultQualifier' => [
                    'ConfigRuleName' => '<string>',
                    'EvaluationMode' => 'DETECTIVE|PROACTIVE',
                    'ResourceId' => '<string>',
                    'ResourceType' => '<string>',
                ],
                'OrderingTimestamp' => <DateTime>,
                'ResourceEvaluationId' => '<string>',
            ],
            'ResultRecordedTime' => <DateTime>,
            'ResultToken' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

GetComplianceSummaryByConfigRule

$result = $client->getComplianceSummaryByConfigRule([/* ... */]);
$promise = $client->getComplianceSummaryByConfigRuleAsync([/* ... */]);

Returns the number of Config rules that are compliant and noncompliant, up to a maximum of 25 for each.

Parameter Syntax

$result = $client->getComplianceSummaryByConfigRule([
]);

Parameter Details

Result Syntax

[
    'ComplianceSummary' => [
        'ComplianceSummaryTimestamp' => <DateTime>,
        'CompliantResourceCount' => [
            'CapExceeded' => true || false,
            'CappedCount' => <integer>,
        ],
        'NonCompliantResourceCount' => [
            'CapExceeded' => true || false,
            'CappedCount' => <integer>,
        ],
    ],
]

Result Details

Errors

There are no errors described for this operation.

GetComplianceSummaryByResourceType

$result = $client->getComplianceSummaryByResourceType([/* ... */]);
$promise = $client->getComplianceSummaryByResourceTypeAsync([/* ... */]);

Returns the number of resources that are compliant and the number that are noncompliant. You can specify one or more resource types to get these numbers for each resource type. The maximum number returned is 100.

Parameter Syntax

$result = $client->getComplianceSummaryByResourceType([
    'ResourceTypes' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'ComplianceSummariesByResourceType' => [
        [
            'ComplianceSummary' => [
                'ComplianceSummaryTimestamp' => <DateTime>,
                'CompliantResourceCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
                'NonCompliantResourceCount' => [
                    'CapExceeded' => true || false,
                    'CappedCount' => <integer>,
                ],
            ],
            'ResourceType' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

GetConformancePackComplianceDetails

$result = $client->getConformancePackComplianceDetails([/* ... */]);
$promise = $client->getConformancePackComplianceDetailsAsync([/* ... */]);

Returns compliance details of a conformance pack for all Amazon Web Services resources that are monitered by conformance pack.

Parameter Syntax

$result = $client->getConformancePackComplianceDetails([
    'ConformancePackName' => '<string>', // REQUIRED
    'Filters' => [
        'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
        'ConfigRuleNames' => ['<string>', ...],
        'ResourceIds' => ['<string>', ...],
        'ResourceType' => '<string>',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConformancePackName' => '<string>',
    'ConformancePackRuleEvaluationResults' => [
        [
            'Annotation' => '<string>',
            'ComplianceType' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
            'ConfigRuleInvokedTime' => <DateTime>,
            'EvaluationResultIdentifier' => [
                'EvaluationResultQualifier' => [
                    'ConfigRuleName' => '<string>',
                    'EvaluationMode' => 'DETECTIVE|PROACTIVE',
                    'ResourceId' => '<string>',
                    'ResourceType' => '<string>',
                ],
                'OrderingTimestamp' => <DateTime>,
                'ResourceEvaluationId' => '<string>',
            ],
            'ResultRecordedTime' => <DateTime>,
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConformancePackException:

You specified one or more conformance packs that do not exist.

NoSuchConfigRuleInConformancePackException:

Config rule that you passed in the filter does not exist.

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

GetConformancePackComplianceSummary

$result = $client->getConformancePackComplianceSummary([/* ... */]);
$promise = $client->getConformancePackComplianceSummaryAsync([/* ... */]);

Returns compliance details for the conformance pack based on the cumulative compliance results of all the rules in that conformance pack.

Parameter Syntax

$result = $client->getConformancePackComplianceSummary([
    'ConformancePackNames' => ['<string>', ...], // REQUIRED
    'Limit' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConformancePackComplianceSummaryList' => [
        [
            'ConformancePackComplianceStatus' => 'COMPLIANT|NON_COMPLIANT|INSUFFICIENT_DATA',
            'ConformancePackName' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

NoSuchConformancePackException:

You specified one or more conformance packs that do not exist.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

GetCustomRulePolicy

$result = $client->getCustomRulePolicy([/* ... */]);
$promise = $client->getCustomRulePolicyAsync([/* ... */]);

Returns the policy definition containing the logic for your Config Custom Policy rule.

Parameter Syntax

$result = $client->getCustomRulePolicy([
    'ConfigRuleName' => '<string>',
]);

Parameter Details

Result Syntax

[
    'PolicyText' => '<string>',
]

Result Details

Errors

NoSuchConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

GetDiscoveredResourceCounts

$result = $client->getDiscoveredResourceCounts([/* ... */]);
$promise = $client->getDiscoveredResourceCountsAsync([/* ... */]);

Returns the resource types, the number of each resource type, and the total number of resources that Config is recording in this region for your Amazon Web Services account.

Example

1. Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets.

2. You make a call to the GetDiscoveredResourceCounts action and specify that you want all resource types.

3. Config returns the following:

   • The resource types (EC2 instances, IAM users, and S3 buckets).

   • The number of each resource type (25, 20, and 15).

   • The total number of all resources (60).

The response is paginated. By default, Config lists 100 ResourceCount objects on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter.

Parameter Syntax

$result = $client->getDiscoveredResourceCounts([
    'limit' => <integer>,
    'nextToken' => '<string>',
    'resourceTypes' => ['<string>', ...],
]);

Parameter Details

Result Syntax

[
    'nextToken' => '<string>',
    'resourceCounts' => [
        [
            'count' => <integer>,
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
        ],
        // ...
    ],
    'totalDiscoveredResources' => <integer>,
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

GetOrganizationConfigRuleDetailedStatus

$result = $client->getOrganizationConfigRuleDetailedStatus([/* ... */]);
$promise = $client->getOrganizationConfigRuleDetailedStatusAsync([/* ... */]);

Returns detailed status for each member account within an organization for a given organization Config rule.

Parameter Syntax

$result = $client->getOrganizationConfigRuleDetailedStatus([
    'Filters' => [
        'AccountId' => '<string>',
        'MemberAccountRuleStatus' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConfigRuleName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConfigRuleDetailedStatus' => [
        [
            'AccountId' => '<string>',
            'ConfigRuleName' => '<string>',
            'ErrorCode' => '<string>',
            'ErrorMessage' => '<string>',
            'LastUpdateTime' => <DateTime>,
            'MemberAccountRuleStatus' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an organization Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

GetOrganizationConformancePackDetailedStatus

$result = $client->getOrganizationConformancePackDetailedStatus([/* ... */]);
$promise = $client->getOrganizationConformancePackDetailedStatusAsync([/* ... */]);

Returns detailed status for each member account within an organization for a given organization conformance pack.

Parameter Syntax

$result = $client->getOrganizationConformancePackDetailedStatus([
    'Filters' => [
        'AccountId' => '<string>',
        'Status' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'OrganizationConformancePackName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'OrganizationConformancePackDetailedStatuses' => [
        [
            'AccountId' => '<string>',
            'ConformancePackName' => '<string>',
            'ErrorCode' => '<string>',
            'ErrorMessage' => '<string>',
            'LastUpdateTime' => <DateTime>,
            'Status' => 'CREATE_SUCCESSFUL|CREATE_IN_PROGRESS|CREATE_FAILED|DELETE_SUCCESSFUL|DELETE_FAILED|DELETE_IN_PROGRESS|UPDATE_SUCCESSFUL|UPDATE_IN_PROGRESS|UPDATE_FAILED',
        ],
        // ...
    ],
]

Result Details

Errors

NoSuchOrganizationConformancePackException:

Config organization conformance pack that you passed in the filter does not exist.

For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

GetOrganizationCustomRulePolicy

$result = $client->getOrganizationCustomRulePolicy([/* ... */]);
$promise = $client->getOrganizationCustomRulePolicyAsync([/* ... */]);

Returns the policy definition containing the logic for your organization Config Custom Policy rule.

Parameter Syntax

$result = $client->getOrganizationCustomRulePolicy([
    'OrganizationConfigRuleName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'PolicyText' => '<string>',
]

Result Details

Errors

NoSuchOrganizationConfigRuleException:

The Config rule in the request is not valid. Verify that the rule is an organization Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.

OrganizationAccessDeniedException:

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API

• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.

• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principal name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.

GetResourceConfigHistory

$result = $client->getResourceConfigHistory([/* ... */]);
$promise = $client->getResourceConfigHistoryAsync([/* ... */]);

For accurate reporting on the compliance status, you must record the AWS::Config::ResourceCompliance resource type. For more information, see Selecting Which Resources Config Records.

Returns a list of ConfigurationItems for the specified resource. The list contains details about each state of the resource during the specified time interval. If you specified a retention period to retain your ConfigurationItems between a minimum of 30 days and a maximum of 7 years (2557 days), Config returns the ConfigurationItems for the specified retention period.

The response is paginated. By default, Config returns a limit of 10 configuration items per page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter.

Parameter Syntax

$result = $client->getResourceConfigHistory([
    'chronologicalOrder' => 'Reverse|Forward',
    'earlierTime' => <integer || string || DateTime>,
    'laterTime' => <integer || string || DateTime>,
    'limit' => <integer>,
    'nextToken' => '<string>',
    'resourceId' => '<string>', // REQUIRED
    'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'configurationItems' => [
        [
            'accountId' => '<string>',
            'arn' => '<string>',
            'availabilityZone' => '<string>',
            'awsRegion' => '<string>',
            'configuration' => '<string>',
            'configurationItemCaptureTime' => <DateTime>,
            'configurationItemDeliveryTime' => <DateTime>,
            'configurationItemMD5Hash' => '<string>',
            'configurationItemStatus' => 'OK|ResourceDiscovered|ResourceNotRecorded|ResourceDeleted|ResourceDeletedNotRecorded',
            'configurationStateId' => '<string>',
            'recordingFrequency' => 'CONTINUOUS|DAILY',
            'relatedEvents' => ['<string>', ...],
            'relationships' => [
                [
                    'relationshipName' => '<string>',
                    'resourceId' => '<string>',
                    'resourceName' => '<string>',
                    'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
                ],
                // ...
            ],
            'resourceCreationTime' => <DateTime>,
            'resourceId' => '<string>',
            'resourceName' => '<string>',
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            'supplementaryConfiguration' => ['<string>', ...],
            'tags' => ['<string>', ...],
            'version' => '<string>',
        ],
        // ...
    ],
    'nextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidTimeRangeException:

The specified time range is not valid. The earlier time is not chronologically before the later time.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoAvailableConfigurationRecorderException:

There are no customer managed configuration recorders available to record your resources. Use the PutConfigurationRecorder operation to create the customer managed configuration recorder.

ResourceNotDiscoveredException:

You have specified a resource that is either unknown or has not been discovered.

GetResourceEvaluationSummary

$result = $client->getResourceEvaluationSummary([/* ... */]);
$promise = $client->getResourceEvaluationSummaryAsync([/* ... */]);

Returns a summary of resource evaluation for the specified resource evaluation ID from the proactive rules that were run. The results indicate which evaluation context was used to evaluate the rules, which resource details were evaluated, the evaluation mode that was run, and whether the resource details comply with the configuration of the proactive rules.

Parameter Syntax

$result = $client->getResourceEvaluationSummary([
    'ResourceEvaluationId' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'Compliance' => 'COMPLIANT|NON_COMPLIANT|NOT_APPLICABLE|INSUFFICIENT_DATA',
    'EvaluationContext' => [
        'EvaluationContextIdentifier' => '<string>',
    ],
    'EvaluationMode' => 'DETECTIVE|PROACTIVE',
    'EvaluationStartTimestamp' => <DateTime>,
    'EvaluationStatus' => [
        'FailureReason' => '<string>',
        'Status' => 'IN_PROGRESS|FAILED|SUCCEEDED',
    ],
    'ResourceDetails' => [
        'ResourceConfiguration' => '<string>',
        'ResourceConfigurationSchemaType' => 'CFN_RESOURCE_SCHEMA',
        'ResourceId' => '<string>',
        'ResourceType' => '<string>',
    ],
    'ResourceEvaluationId' => '<string>',
]

Result Details

Errors

ResourceNotFoundException:

You have specified a resource that does not exist.

GetStoredQuery

$result = $client->getStoredQuery([/* ... */]);
$promise = $client->getStoredQueryAsync([/* ... */]);

Returns the details of a specific stored query.

Parameter Syntax

$result = $client->getStoredQuery([
    'QueryName' => '<string>', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'StoredQuery' => [
        'Description' => '<string>',
        'Expression' => '<string>',
        'QueryArn' => '<string>',
        'QueryId' => '<string>',
        'QueryName' => '<string>',
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ResourceNotFoundException:

You have specified a resource that does not exist.

ListAggregateDiscoveredResources

$result = $client->listAggregateDiscoveredResources([/* ... */]);
$promise = $client->listAggregateDiscoveredResourcesAsync([/* ... */]);

Accepts a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions. A resource identifier includes the resource type, ID, (if available) the custom resource name, source account, and source region. You can narrow the results to include only resources that have specific resource IDs, or a resource name, or source account ID, or source region.

For example, if the input consists of accountID 12345678910 and the region is us-east-1 for resource type AWS::EC2::Instance then the API returns all the EC2 instance identifiers of accountID 12345678910 and region us-east-1.

Parameter Syntax

$result = $client->listAggregateDiscoveredResources([
    'ConfigurationAggregatorName' => '<string>', // REQUIRED
    'Filters' => [
        'AccountId' => '<string>',
        'Region' => '<string>',
        'ResourceId' => '<string>',
        'ResourceName' => '<string>',
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'NextToken' => '<string>',
    'ResourceIdentifiers' => [
        [
            'ResourceId' => '<string>',
            'ResourceName' => '<string>',
            'ResourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
            'SourceAccountId' => '<string>',
            'SourceRegion' => '<string>',
        ],
        // ...
    ],
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

NoSuchConfigurationAggregatorException:

You have specified a configuration aggregator that does not exist.

ListConfigurationRecorders

$result = $client->listConfigurationRecorders([/* ... */]);
$promise = $client->listConfigurationRecordersAsync([/* ... */]);

Returns a list of configuration recorders depending on the filters you specify.

Parameter Syntax

$result = $client->listConfigurationRecorders([
    'Filters' => [
        [
            'filterName' => 'recordingScope',
            'filterValue' => ['<string>', ...],
        ],
        // ...
    ],
    'MaxResults' => <integer>,
    'NextToken' => '<string>',
]);

Parameter Details

Result Syntax

[
    'ConfigurationRecorderSummaries' => [
        [
            'arn' => '<string>',
            'name' => '<string>',
            'recordingScope' => 'INTERNAL|PAID',
            'servicePrincipal' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

ValidationException:

The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.

For PutStoredQuery, one of the following errors:

• There are missing required fields.

• The input value fails the validation.

• You are trying to create more than 300 queries.

For DescribeConfigurationRecorders and DescribeConfigurationRecorderStatus, one of the following errors:

• You have specified more than one configuration recorder.

• You have provided a service principal for service-linked configuration recorder that is not valid.

For AssociateResourceTypes and DisassociateResourceTypes, one of the following errors:

• Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.

• One or more of the specified resource types are already associated or disassociated with the configuration recorder.

• For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.

ListConformancePackComplianceScores

$result = $client->listConformancePackComplianceScores([/* ... */]);
$promise = $client->listConformancePackComplianceScoresAsync([/* ... */]);

Returns a list of conformance pack compliance scores. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs. You can use it to identify, investigate, and understand the level of compliance in your conformance packs.

Parameter Syntax

$result = $client->listConformancePackComplianceScores([
    'Filters' => [
        'ConformancePackNames' => ['<string>', ...], // REQUIRED
    ],
    'Limit' => <integer>,
    'NextToken' => '<string>',
    'SortBy' => 'SCORE',
    'SortOrder' => 'ASCENDING|DESCENDING',
]);

Parameter Details

Result Syntax

[
    'ConformancePackComplianceScores' => [
        [
            'ConformancePackName' => '<string>',
            'LastUpdatedTime' => <DateTime>,
            'Score' => '<string>',
        ],
        // ...
    ],
    'NextToken' => '<string>',
]

Result Details

Errors

InvalidParameterValueException:

One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.

InvalidLimitException:

The specified limit is outside the allowable range.

InvalidNextTokenException:

The specified next token is not valid. Specify the nextToken string that was returned in the previous response to get the next page of results.

ListDiscoveredResources

$result = $client->listDiscoveredResources([/* ... */]);
$promise = $client->listDiscoveredResourcesAsync([/* ... */]);

Accepts a resource type and returns a list of resource identifiers for the resources of that type. A resource identifier includes the resource type, ID, and (if available) the custom resource name. The results consist of resources that Config has discovered, including those that Config is not currently recording. You can narrow the results to include only resources that have specific resource IDs or a resource name.

The response is paginated. By default, Config lists 100 resource identifiers on each page. You can customize this number with the limit parameter. The response includes a nextToken string. To get the next page of results, run the request again and specify the string for the nextToken parameter.

Parameter Syntax

$result = $client->listDiscoveredResources([
    'includeDeletedResources' => true || false,
    'limit' => <integer>,
    'nextToken' => '<string>',
    'resourceIds' => ['<string>', ...],
    'resourceName' => '<string>',
    'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document', // REQUIRED
]);

Parameter Details

Result Syntax

[
    'nextToken' => '<string>',
    'resourceIdentifiers' => [
        [
            'resourceDeletionTime' => <DateTime>,
            'resourceId' => '<string>',
            'resourceName' => '<string>',
            'resourceType' => 'AWS::EC2::CustomerGateway|AWS::EC2::EIP|AWS::EC2::Host|AWS::EC2::Instance|AWS::EC2::InternetGateway|AWS::EC2::NetworkAcl|AWS::EC2::NetworkInterface|AWS::EC2::RouteTable|AWS::EC2::SecurityGroup|AWS::EC2::Subnet|AWS::CloudTrail::Trail|AWS::EC2::Volume|AWS::EC2::VPC|AWS::EC2::VPNConnection|AWS::EC2::VPNGateway|AWS::EC2::RegisteredHAInstance|AWS::EC2::NatGateway|AWS::EC2::EgressOnlyInternetGateway|AWS::EC2::VPCEndpoint|AWS::EC2::VPCEndpointService|AWS::EC2::FlowLog|AWS::EC2::VPCPeeringConnection|AWS::Elasticsearch::Domain|AWS::IAM::Group|AWS::IAM::Policy|AWS::IAM::Role|AWS::IAM::User|AWS::ElasticLoadBalancingV2::LoadBalancer|AWS::ACM::Certificate|AWS::RDS::DBInstance|AWS::RDS::DBSubnetGroup|AWS::RDS::DBSecurityGroup|AWS::RDS::DBSnapshot|AWS::RDS::DBCluster|AWS::RDS::DBClusterSnapshot|AWS::RDS::EventSubscription|AWS::S3::Bucket|AWS::S3::AccountPublicAccessBlock|AWS::Redshift::Cluster|AWS::Redshift::ClusterSnapshot|AWS::Redshift::ClusterParameterGroup|AWS::Redshift::ClusterSecurityGroup|AWS::Redshift::ClusterSubnetGroup|AWS::Redshift::EventSubscription|AWS::SSM::ManagedInstanceInventory|AWS::CloudWatch::Alarm|AWS::CloudFormation::Stack|AWS::ElasticLoadBalancing::LoadBalancer|AWS::AutoScaling::AutoScalingGroup|AWS::AutoScaling::LaunchConfiguration|AWS::AutoScaling::ScalingPolicy|AWS::AutoScaling::ScheduledAction|AWS::DynamoDB::Table|AWS::CodeBuild::Project|AWS::WAF::RateBasedRule|AWS::WAF::Rule|AWS::WAF::RuleGroup|AWS::WAF::WebACL|AWS::WAFRegional::RateBasedRule|AWS::WAFRegional::Rule|AWS::WAFRegional::RuleGroup|AWS::WAFRegional::WebACL|AWS::CloudFront::Distribution|AWS::CloudFront::StreamingDistribution|AWS::Lambda::Function|AWS::NetworkFirewall::Firewall|AWS::NetworkFirewall::FirewallPolicy|AWS::NetworkFirewall::RuleGroup|AWS::ElasticBeanstalk::Application|AWS::ElasticBeanstalk::ApplicationVersion|AWS::ElasticBeanstalk::Environment|AWS::WAFv2::WebACL|AWS::WAFv2::RuleGroup|AWS::WAFv2::IPSet|AWS::WAFv2::RegexPatternSet|AWS::WAFv2::ManagedRuleSet|AWS::XRay::EncryptionConfig|AWS::SSM::AssociationCompliance|AWS::SSM::PatchCompliance|AWS::Shield::Protection|AWS::ShieldRegional::Protection|AWS::Config::ConformancePackCompliance|AWS::Config::ResourceCompliance|AWS::ApiGateway::Stage|AWS::ApiGateway::RestApi|AWS::ApiGatewayV2::Stage|AWS::ApiGatewayV2::Api|AWS::CodePipeline::Pipeline|AWS::ServiceCatalog::CloudFormationProvisionedProduct|AWS::ServiceCatalog::CloudFormationProduct|AWS::ServiceCatalog::Portfolio|AWS::SQS::Queue|AWS::KMS::Key|AWS::QLDB::Ledger|AWS::SecretsManager::Secret|AWS::SNS::Topic|AWS::SSM::FileData|AWS::Backup::BackupPlan|AWS::Backup::BackupSelection|AWS::Backup::BackupVault|AWS::Backup::RecoveryPoint|AWS::ECR::Repository|AWS::ECS::Cluster|AWS::ECS::Service|AWS::ECS::TaskDefinition|AWS::EFS::AccessPoint|AWS::EFS::FileSystem|AWS::EKS::Cluster|AWS::OpenSearch::Domain|AWS::EC2::TransitGateway|AWS::Kinesis::Stream|AWS::Kinesis::StreamConsumer|AWS::CodeDeploy::Application|AWS::CodeDeploy::DeploymentConfig|AWS::CodeDeploy::DeploymentGroup|AWS::EC2::LaunchTemplate|AWS::ECR::PublicRepository|AWS::GuardDuty::Detector|AWS::EMR::SecurityConfiguration|AWS::SageMaker::CodeRepository|AWS::Route53Resolver::ResolverEndpoint|AWS::Route53Resolver::ResolverRule|AWS::Route53Resolver::ResolverRuleAssociation|AWS::DMS::ReplicationSubnetGroup|AWS::DMS::EventSubscription|AWS::MSK::Cluster|AWS::StepFunctions::Activity|AWS::WorkSpaces::Workspace|AWS::WorkSpaces::ConnectionAlias|AWS::SageMaker::Model|AWS::ElasticLoadBalancingV2::Listener|AWS::StepFunctions::StateMachine|AWS::Batch::JobQueue|AWS::Batch::ComputeEnvironment|AWS::AccessAnalyzer::Analyzer|AWS::Athena::WorkGroup|AWS::Athena::DataCatalog|AWS::Detective::Graph|AWS::GlobalAccelerator::Accelerator|AWS::GlobalAccelerator::EndpointGroup|AWS::GlobalAccelerator::Listener|AWS::EC2::TransitGatewayAttachment|AWS::EC2::TransitGatewayRouteTable|AWS::DMS::Certificate|AWS::AppConfig::Application|AWS::AppSync::GraphQLApi|AWS::DataSync::LocationSMB|AWS::DataSync::LocationFSxLustre|AWS::DataSync::LocationS3|AWS::DataSync::LocationEFS|AWS::DataSync::Task|AWS::DataSync::LocationNFS|AWS::EC2::NetworkInsightsAccessScopeAnalysis|AWS::EKS::FargateProfile|AWS::Glue::Job|AWS::GuardDuty::ThreatIntelSet|AWS::GuardDuty::IPSet|AWS::SageMaker::Workteam|AWS::SageMaker::NotebookInstanceLifecycleConfig|AWS::ServiceDiscovery::Service|AWS::ServiceDiscovery::PublicDnsNamespace|AWS::SES::ContactList|AWS::SES::ConfigurationSet|AWS::Route53::HostedZone|AWS::IoTEvents::Input|AWS::IoTEvents::DetectorModel|AWS::IoTEvents::AlarmModel|AWS::ServiceDiscovery::HttpNamespace|AWS::Events::EventBus|AWS::ImageBuilder::ContainerRecipe|AWS::ImageBuilder::DistributionConfiguration|AWS::ImageBuilder::InfrastructureConfiguration|AWS::DataSync::LocationObjectStorage|AWS::DataSync::LocationHDFS|AWS::Glue::Classifier|AWS::Route53RecoveryReadiness::Cell|AWS::Route53RecoveryReadiness::ReadinessCheck|AWS::ECR::RegistryPolicy|AWS::Backup::ReportPlan|AWS::Lightsail::Certificate|AWS::RUM::AppMonitor|AWS::Events::Endpoint|AWS::SES::ReceiptRuleSet|AWS::Events::Archive|AWS::Events::ApiDestination|AWS::Lightsail::Disk|AWS::FIS::ExperimentTemplate|AWS::DataSync::LocationFSxWindows|AWS::SES::ReceiptFilter|AWS::GuardDuty::Filter|AWS::SES::Template|AWS::AmazonMQ::Broker|AWS::AppConfig::Environment|AWS::AppConfig::ConfigurationProfile|AWS::Cloud9::EnvironmentEC2|AWS::EventSchemas::Registry|AWS::EventSchemas::RegistryPolicy|AWS::EventSchemas::Discoverer|AWS::FraudDetector::Label|AWS::FraudDetector::EntityType|AWS::FraudDetector::Variable|AWS::FraudDetector::Outcome|AWS::IoT::Authorizer|AWS::IoT::SecurityProfile|AWS::IoT::RoleAlias|AWS::IoT::Dimension|AWS::IoTAnalytics::Datastore|AWS::Lightsail::Bucket|AWS::Lightsail::StaticIp|AWS::MediaPackage::PackagingGroup|AWS::Route53RecoveryReadiness::RecoveryGroup|AWS::ResilienceHub::ResiliencyPolicy|AWS::Transfer::Workflow|AWS::EKS::IdentityProviderConfig|AWS::EKS::Addon|AWS::Glue::MLTransform|AWS::IoT::Policy|AWS::IoT::MitigationAction|AWS::IoTTwinMaker::Workspace|AWS::IoTTwinMaker::Entity|AWS::IoTAnalytics::Dataset|AWS::IoTAnalytics::Pipeline|AWS::IoTAnalytics::Channel|AWS::IoTSiteWise::Dashboard|AWS::IoTSiteWise::Project|AWS::IoTSiteWise::Portal|AWS::IoTSiteWise::AssetModel|AWS::IVS::Channel|AWS::IVS::RecordingConfiguration|AWS::IVS::PlaybackKeyPair|AWS::KinesisAnalyticsV2::Application|AWS::RDS::GlobalCluster|AWS::S3::MultiRegionAccessPoint|AWS::DeviceFarm::TestGridProject|AWS::Budgets::BudgetsAction|AWS::Lex::Bot|AWS::CodeGuruReviewer::RepositoryAssociation|AWS::IoT::CustomMetric|AWS::Route53Resolver::FirewallDomainList|AWS::RoboMaker::RobotApplicationVersion|AWS::EC2::TrafficMirrorSession|AWS::IoTSiteWise::Gateway|AWS::Lex::BotAlias|AWS::LookoutMetrics::Alert|AWS::IoT::AccountAuditConfiguration|AWS::EC2::TrafficMirrorTarget|AWS::S3::StorageLens|AWS::IoT::ScheduledAudit|AWS::Events::Connection|AWS::EventSchemas::Schema|AWS::MediaPackage::PackagingConfiguration|AWS::KinesisVideo::SignalingChannel|AWS::AppStream::DirectoryConfig|AWS::LookoutVision::Project|AWS::Route53RecoveryControl::Cluster|AWS::Route53RecoveryControl::SafetyRule|AWS::Route53RecoveryControl::ControlPanel|AWS::Route53RecoveryControl::RoutingControl|AWS::Route53RecoveryReadiness::ResourceSet|AWS::RoboMaker::SimulationApplication|AWS::RoboMaker::RobotApplication|AWS::HealthLake::FHIRDatastore|AWS::Pinpoint::Segment|AWS::Pinpoint::ApplicationSettings|AWS::Events::Rule|AWS::EC2::DHCPOptions|AWS::EC2::NetworkInsightsPath|AWS::EC2::TrafficMirrorFilter|AWS::EC2::IPAM|AWS::IoTTwinMaker::Scene|AWS::NetworkManager::TransitGatewayRegistration|AWS::CustomerProfiles::Domain|AWS::AutoScaling::WarmPool|AWS::Connect::PhoneNumber|AWS::AppConfig::DeploymentStrategy|AWS::AppFlow::Flow|AWS::AuditManager::Assessment|AWS::CloudWatch::MetricStream|AWS::DeviceFarm::InstanceProfile|AWS::DeviceFarm::Project|AWS::EC2::EC2Fleet|AWS::EC2::SubnetRouteTableAssociation|AWS::ECR::PullThroughCacheRule|AWS::GroundStation::Config|AWS::ImageBuilder::ImagePipeline|AWS::IoT::FleetMetric|AWS::IoTWireless::ServiceProfile|AWS::NetworkManager::Device|AWS::NetworkManager::GlobalNetwork|AWS::NetworkManager::Link|AWS::NetworkManager::Site|AWS::Panorama::Package|AWS::Pinpoint::App|AWS::Redshift::ScheduledAction|AWS::Route53Resolver::FirewallRuleGroupAssociation|AWS::SageMaker::AppImageConfig|AWS::SageMaker::Image|AWS::ECS::TaskSet|AWS::Cassandra::Keyspace|AWS::Signer::SigningProfile|AWS::Amplify::App|AWS::AppMesh::VirtualNode|AWS::AppMesh::VirtualService|AWS::AppRunner::VpcConnector|AWS::AppStream::Application|AWS::CodeArtifact::Repository|AWS::EC2::PrefixList|AWS::EC2::SpotFleet|AWS::Evidently::Project|AWS::Forecast::Dataset|AWS::IAM::SAMLProvider|AWS::IAM::ServerCertificate|AWS::Pinpoint::Campaign|AWS::Pinpoint::InAppTemplate|AWS::SageMaker::Domain|AWS::Transfer::Agreement|AWS::Transfer::Connector|AWS::KinesisFirehose::DeliveryStream|AWS::Amplify::Branch|AWS::AppIntegrations::EventIntegration|AWS::AppMesh::Route|AWS::Athena::PreparedStatement|AWS::EC2::IPAMScope|AWS::Evidently::Launch|AWS::Forecast::DatasetGroup|AWS::GreengrassV2::ComponentVersion|AWS::GroundStation::MissionProfile|AWS::MediaConnect::FlowEntitlement|AWS::MediaConnect::FlowVpcInterface|AWS::MediaTailor::PlaybackConfiguration|AWS::MSK::Configuration|AWS::Personalize::Dataset|AWS::Personalize::Schema|AWS::Personalize::Solution|AWS::Pinpoint::EmailTemplate|AWS::Pinpoint::EventStream|AWS::ResilienceHub::App|AWS::ACMPCA::CertificateAuthority|AWS::AppConfig::HostedConfigurationVersion|AWS::AppMesh::VirtualGateway|AWS::AppMesh::VirtualRouter|AWS::AppRunner::Service|AWS::CustomerProfiles::ObjectType|AWS::DMS::Endpoint|AWS::EC2::CapacityReservation|AWS::EC2::ClientVpnEndpoint|AWS::Kendra::Index|AWS::KinesisVideo::Stream|AWS::Logs::Destination|AWS::Pinpoint::EmailChannel|AWS::S3::AccessPoint|AWS::NetworkManager::CustomerGatewayAssociation|AWS::NetworkManager::LinkAssociation|AWS::IoTWireless::MulticastGroup|AWS::Personalize::DatasetGroup|AWS::IoTTwinMaker::ComponentType|AWS::CodeBuild::ReportGroup|AWS::SageMaker::FeatureGroup|AWS::MSK::BatchScramSecret|AWS::AppStream::Stack|AWS::IoT::JobTemplate|AWS::IoTWireless::FuotaTask|AWS::IoT::ProvisioningTemplate|AWS::InspectorV2::Filter|AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation|AWS::ServiceDiscovery::Instance|AWS::Transfer::Certificate|AWS::MediaConnect::FlowSource|AWS::APS::RuleGroupsNamespace|AWS::CodeGuruProfiler::ProfilingGroup|AWS::Route53Resolver::ResolverQueryLoggingConfig|AWS::Batch::SchedulingPolicy|AWS::ACMPCA::CertificateAuthorityActivation|AWS::AppMesh::GatewayRoute|AWS::AppMesh::Mesh|AWS::Connect::Instance|AWS::Connect::QuickConnect|AWS::EC2::CarrierGateway|AWS::EC2::IPAMPool|AWS::EC2::TransitGatewayConnect|AWS::EC2::TransitGatewayMulticastDomain|AWS::ECS::CapacityProvider|AWS::IAM::InstanceProfile|AWS::IoT::CACertificate|AWS::IoTTwinMaker::SyncJob|AWS::KafkaConnect::Connector|AWS::Lambda::CodeSigningConfig|AWS::NetworkManager::ConnectPeer|AWS::ResourceExplorer2::Index|AWS::AppStream::Fleet|AWS::Cognito::UserPool|AWS::Cognito::UserPoolClient|AWS::Cognito::UserPoolGroup|AWS::EC2::NetworkInsightsAccessScope|AWS::EC2::NetworkInsightsAnalysis|AWS::Grafana::Workspace|AWS::GroundStation::DataflowEndpointGroup|AWS::ImageBuilder::ImageRecipe|AWS::KMS::Alias|AWS::M2::Environment|AWS::QuickSight::DataSource|AWS::QuickSight::Template|AWS::QuickSight::Theme|AWS::RDS::OptionGroup|AWS::Redshift::EndpointAccess|AWS::Route53Resolver::FirewallRuleGroup|AWS::SSM::Document',
        ],
        // ...
    ],
]