Data retrieval APIs for AWS Config
AWS Config provides the following APIs for data retrieval.
| Actions | Description | Access level |
|---|---|---|
| BatchGetAggregateResourceConfig | Return the current configuration items for resources that are present in your AWS Config aggregator | Read |
| BatchGetResourceConfig | Return the current configuration for one or more requested resources | Read |
| DeliverConfigSnapshot | Schedule delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel | Read |
| DescribeAggregateComplianceByConfigRules | Return a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules | Read |
| DescribeAggregateComplianceByConformancePacks | Return a list of compliant and noncompliant conformance packs along with count of compliant, non-compliant and total rules within each conformance pack | Read |
| DescribeAggregationAuthorizations | Return a list of authorizations granted to various aggregator accounts and regions | List |
| DescribeComplianceByConfigRule | Indicate whether the specified AWS Config rules are compliant | Read |
| DescribeComplianceByResource | Indicate whether the specified AWS resources are compliant | Read |
| DescribeConfigRuleEvaluationStatus | Return status information for each of your AWS managed Config rules | Read |
| DescribeConfigRules | Return details about your AWS Config rules | List |
| DescribeConfigurationAggregatorSourcesStatus | Return status information for sources within an aggregator | Read |
| DescribeConfigurationAggregators | Return the details of one or more configuration aggregators | List |
| DescribeConfigurationRecorderStatus | Return the current status of the specified configuration recorder | Read |
| DescribeConfigurationRecorders | Return the names of one or more specified configuration recorders | Read |
| DescribeConformancePackCompliance | Return compliance information for each rule in that conformance pack | Read |
| DescribeConformancePackStatus | Provide one or more conformance packs deployment status | Read |
| DescribeConformancePacks | Return a list of one or more conformance packs | List |
| DescribeDeliveryChannelStatus | Return the current status of the specified delivery channel | Read |
| DescribeDeliveryChannels | Return details about the specified delivery channel | List |
| DescribeOrganizationConfigRuleStatuses | Provide organization config rule deployment status for an organization | Read |
| DescribeOrganizationConfigRules | Return a list of organization config rules | List |
| DescribeOrganizationConformancePackStatuses | Provide organization conformance pack deployment status for an organization | Read |
| DescribeOrganizationConformancePacks | Return a list of organization conformance packs | List |
| DescribePendingAggregationRequests | Return a list of all pending aggregation requests | List |
| DescribeRemediationConfigurations | Return the details of one or more remediation configurations | List |
| DescribeRemediationExceptions | Return the details of one or more remediation exceptions | List |
| DescribeRemediationExecutionStatus | Provide a detailed view of a Remediation Execution for a set of resources including state, timestamps and any error messages for steps that have failed | Read |
| DescribeRetentionConfigurations | Return the details of one or more retention configurations | List |
| GetAggregateComplianceDetailsByConfigRule | Return the evaluation results for the specified AWS Config rule for a specific resource in a rule | Read |
| GetAggregateConfigRuleComplianceSummary | Return the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator | Read |
| GetAggregateConformancePackComplianceSummary | Return the number of compliant and noncompliant conformance packs for one or more accounts and regions in an aggregator | Read |
| GetAggregateDiscoveredResourceCounts | Return the resource counts across accounts and regions that are present in your AWS Config aggregator | Read |
| GetAggregateResourceConfig | Return configuration item that is aggregated for your specific resource in a specific source account and region | Read |
| GetComplianceDetailsByConfigRule | Return the evaluation results for the specified AWS Config rule | Read |
| GetComplianceDetailsByResource | Return the evaluation results for the specified AWS resource | Read |
| GetComplianceSummaryByConfigRule | Return the number of AWS Config rules that are compliant and noncompliant, up to a maximum of 25 for each | Read |
| GetComplianceSummaryByResourceType | Return the number of resources that are compliant and the number that are noncompliant | Read |
| GetConformancePackComplianceDetails | Return compliance details of a conformance pack for all AWS resources that are monitered by conformance pack | Read |
| GetConformancePackComplianceSummary | Provide compliance summary for one or more conformance packs | Read |
| GetCustomRulePolicy | Return the policy definition containing the logic for your AWS Config Custom Policy rule | Read |
| GetDiscoveredResourceCounts | Return the resource types, the number of each resource type, and the total number of resources that AWS Config is recording in this region for your AWS account | Read |
| GetOrganizationConfigRuleDetailedStatus | Return detailed status for each member account within an organization for a given organization config rule | Read |
| GetOrganizationConformancePackDetailedStatus | Return detailed status for each member account within an organization for a given organization conformance pack | Read |
| GetOrganizationCustomRulePolicy | Return the policy definition containing the logic for your organization AWS Config Custom Policy rule | Read |
| GetResourceConfigHistory | Return a list of configuration items for the specified resource | Read |
| GetResourceEvaluationSummary | Return the summary of resource evaluations for a specific resource evaluation ID | Read |
| GetStoredQuery | Return the details of a specific stored query | Read |
| ListAggregateDiscoveredResources | Accept a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions | List |
| ListConfigurationRecorders | List the configuration recorder summaries for an AWS account in an AWS Region | List |
| ListConformancePackComplianceScores | Return the percentage of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations | List |
| ListDiscoveredResources | Accept a resource type and returns a list of resource identifiers for the resources of that type | List |
| ListResourceEvaluations | List the resource evaluation summaries for an AWS account in an AWS Region | List |
| ListStoredQueries | List the stored queries for an AWS account in an AWS Region | List |
| ListTagsForResource | List the tags for AWS Config resource | Read |
| SelectAggregateResourceConfig | Accept a structured query language (SQL) SELECT command and an aggregator to query configuration state of AWS resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties | Read |
| SelectResourceConfig | Accept a structured query language (SQL) SELECT command, performs the corresponding search, and returns resource configurations matching the properties | Read |
