Example Compliance Change Notification - AWS Config

Example Compliance Change Notification

When AWS Config evaluates your resources against a custom or managed rule, AWS Config sends a notification that shows whether the resources are compliant against the rule.

The following is an example notification where the CloudTrail trail resource is compliant against the cloudtrail-enabled managed rule.

{ "Type": "Notification", "MessageId": "11fd05dd-47e1-5523-bc01-55b988bb9478", "TopicArn": "arn:aws:sns:us-east-2:123456789012:config-topic-ohio", "Subject": "[AWS Config:us-east-2] AWS::::Account 123456789012 is COMPLIANT with cloudtrail-enabled in Accoun...", "Message": { "awsAccountId": "123456789012", "configRuleName": "cloudtrail-enabled", "configRuleARN": "arn:aws:config:us-east-2:123456789012:config-rule/config-rule-9rpvxc", "resourceType": "AWS::::Account", "resourceId": "123456789012", "awsRegion": "us-east-2", "newEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T19:48:40.619Z" }, "complianceType": "COMPLIANT", "resultRecordedTime": "2016-09-27T19:48:41.405Z", "configRuleInvokedTime": "2016-09-27T19:48:40.914Z", "annotation": null, "resultToken": null }, "oldEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T16:30:49.531Z" }, "complianceType": "NON_COMPLIANT", "resultRecordedTime": "2016-09-27T16:30:50.717Z", "configRuleInvokedTime": "2016-09-27T16:30:50.105Z", "annotation": null, "resultToken": null }, "notificationCreationTime": "2016-09-27T19:48:42.620Z", "messageType": "ComplianceChangeNotification", "recordVersion": "1.0" }, "Timestamp": "2016-09-27T19:48:42.749Z", "SignatureVersion": "1", "Signature": "XZ9FfLb2ywkW9yj0yBkNtIP5q7Cry6JtCEyUiHmG9gpOZi3seQ41udhtAqCZoiNiizAEi+6gcttHCRV1hNemzp/YmBmTfO6azYXt0FJDaEvd86k68VCS9aqRlBBjYlNo7ILi4Pqd5rE4BX2YBQSzcQyERGkUfTZ2BIFyAmb1Q/y4/6ez8rDyi545FDSlgcGEb4LKLNR6eDi4FbKtMGZHA7Nz8obqs1dHbgWYnp3c80mVLl7ohP4hilcxdywAgXrbsN32ekYr15gdHozx8YzyjfRSo3SjH0c5PGSXEAGNuC3mZrKJip+BIZ21ZtkcUtY5B3ImgRlUO7Yhn3L3c6rZxQ==", "SigningCertURL": "https://sns.us-east-2.amazonaws.com/SimpleNotificationService-b95095beb82e8f6a046b3aafc7f4149a.pem", "UnsubscribeURL": "https://sns.us-east-2.amazonaws.com/?Action=Unsubscribe&SubscriptionArn=arn:aws:sns:us-east-2:123456789012:config-topic-ohio:956fe658-0ce3-4fb3-b409-a45f22a3c3d4" }