Interface CfnConfigurationRecorder.ExclusionByResourceTypesProperty

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
CfnConfigurationRecorder.ExclusionByResourceTypesProperty.Jsii$Proxy
Enclosing class:
CfnConfigurationRecorder

@Stability(Stable) public static interface CfnConfigurationRecorder.ExclusionByResourceTypesProperty extends software.amazon.jsii.JsiiSerializable
Specifies whether the configuration recorder excludes certain resource types from being recorded.

Use the ResourceTypes field to enter a comma-separated list of resource types you want to exclude from recording.

By default, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

How to use the exclusion recording strategy

To use this option, you must set the useOnly field of RecordingStrategy to EXCLUSION_BY_RESOURCE_TYPES .

AWS Config will then record configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded.

Global resource types and the exclusion recording strategy

Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

  • Asia Pacific (Hyderabad)
  • Asia Pacific (Melbourne)
  • Canada West (Calgary)
  • Europe (Spain)
  • Europe (Zurich)
  • Israel (Tel Aviv)
  • Middle East (UAE)

Example:

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.config.*;
 ExclusionByResourceTypesProperty exclusionByResourceTypesProperty = ExclusionByResourceTypesProperty.builder()
         .resourceTypes(List.of("resourceTypes"))
         .build();
 

See Also: