Skip to content
v2.274.0

CustomRuleProps Struct ​

Construction properties for a CustomRule.

Example ​

ts
declare const fn: lambda.Function;
declare const samplePolicyText: string;

new config.ManagedRule(this, 'ManagedRule', {
  identifier: config.ManagedRuleIdentifiers.API_GW_XRAY_ENABLED,
  evaluationModes: config.EvaluationMode.DETECTIVE_AND_PROACTIVE,
});

new config.CustomRule(this, 'CustomRule', {
  lambdaFunction: fn,
  evaluationModes: config.EvaluationMode.PROACTIVE,
});

new config.CustomPolicy(this, 'CustomPolicy', {
  policyText: samplePolicyText,
  evaluationModes: config.EvaluationMode.DETECTIVE,
});

Properties ​

configRuleNameoptionalstringconfig_rule_nameoptionalstrconfigRuleNameoptionalStringConfigRuleNameoptionalstringConfigRuleNameoptional*string#
A name for the AWS Config rule.

Default: CloudFormation generated name

configurationChangesoptionalbooleanconfiguration_changesoptionalboolconfigurationChangesoptionalBooleanConfigurationChangesoptionalboolConfigurationChangesoptional*bool= false#
Whether to run the rule on configuration changes.
descriptionoptionalstringdescriptionoptionalstrdescriptionoptionalStringDescriptionoptionalstringDescriptionoptional*string#
A description about this AWS Config rule.

Default: No description

evaluationModesoptionalEvaluationModeevaluation_modesoptionalEvaluationModeevaluationModesoptionalEvaluationModeEvaluationModesoptionalEvaluationModeEvaluationModesoptionalEvaluationMode#
The modes the AWS Config rule can be evaluated in.

Default: Detective evaluation mode only

The valid values are distinct objects.

inputParametersoptional{ [key: string]: any }input_parametersoptionaltyping.Mapping[str, Any]inputParametersoptionalMap<String, Object>InputParametersoptionalIDictionary<string, object>InputParametersoptional*map[string]interface{}#
Input parameter values that are passed to the AWS Config rule.

Default: No input parameters

lambdaFunctionIFunctionlambda_functionIFunctionlambdaFunctionIFunctionLambdaFunctionIFunctionLambdaFunctionIFunctionrequired#
The Lambda function to run.
maximumExecutionFrequencyoptionalMaximumExecutionFrequencymaximum_execution_frequencyoptionalMaximumExecutionFrequencymaximumExecutionFrequencyoptionalMaximumExecutionFrequencyMaximumExecutionFrequencyoptionalMaximumExecutionFrequencyMaximumExecutionFrequencyoptionalMaximumExecutionFrequency#
The maximum frequency at which the AWS Config rule runs evaluations.

Default: MaximumExecutionFrequency.TWENTY_FOUR_HOURS

periodicoptionalbooleanperiodicoptionalboolperiodicoptionalBooleanPeriodicoptionalboolPeriodicoptional*bool= false#
Whether to run the rule on a fixed frequency.
ruleScopeoptionalRuleScoperule_scopeoptionalRuleScoperuleScopeoptionalRuleScopeRuleScopeoptionalRuleScopeRuleScopeoptionalRuleScope#
Defines which resources trigger an evaluation for an AWS Config rule.

Default: evaluations for the rule are triggered when any resource in the recording group changes.