# CloudFormationStackDriftDetectionCheckProps

Construction properties for a CloudFormationStackDriftDetectionCheck.

Extends: CloudFormationStackDriftDetectionCheckProps
Extends: RuleProps
Used as props by: CloudFormationStackDriftDetectionCheck

- Source: [`aws-config/lib/managed-rules.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-config/lib/managed-rules.ts#L57)
- Type last changed: v2.224.0 · 13 Nov 2025

## Example

```ts
// compliant if stack's status is 'IN_SYNC'
// non-compliant if the stack's drift status is 'DRIFTED'
new config.CloudFormationStackDriftDetectionCheck(this, 'Drift', {
  ownStackOnly: true, // checks only the stack containing the rule
});
```

## Properties

- `configRuleName`: string — A name for the AWS Config rule.

  **Default:** CloudFormation generated name

- `description`: string — A description about this AWS Config rule.

  **Default:** No description

- `evaluationModes`: [EvaluationMode](/cdk/api/v2/docs/aws-cdk-lib.aws_config.EvaluationMode.html) — The modes the AWS Config rule can be evaluated in.

  **Default:** Detective evaluation mode only

  The valid values are distinct objects.

- `inputParameters`: { [key: string]: any } — Input parameter values that are passed to the AWS Config rule.

  **Default:** No input parameters

- `maximumExecutionFrequency`: [MaximumExecutionFrequency](/cdk/api/v2/docs/aws-cdk-lib.aws_config.MaximumExecutionFrequency.html) — The maximum frequency at which the AWS Config rule runs evaluations.

  **Default:** MaximumExecutionFrequency.TWENTY_FOUR_HOURS

- `ownStackOnly`: boolean = false — Whether to check only the stack where this rule is deployed.

- `role`: [IRoleRef](/cdk/api/v2/docs/aws-cdk-lib.interfaces.aws_iam.IRoleRef.html) — The IAM role to use for this rule.

  **Default:** A role will be created

  It must have permissions to detect drift
  for AWS CloudFormation stacks. Ensure to attach `config.amazonaws.com` trusted
  permissions and `ReadOnlyAccess` policy permissions. For specific policy permissions,
  refer to https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html.

- `ruleScope`: [RuleScope](/cdk/api/v2/docs/aws-cdk-lib.aws_config.RuleScope.html) — Defines which resources trigger an evaluation for an AWS Config rule.

  **Default:** evaluations for the rule are triggered when any resource in the recording group changes.