放置一个AWS Config规则使用AWS开发工具包

以下代码示例显示如何放置AWS Config规则。

Python

适用于 Python (Boto3) 的 SDK

提示

要了解如何设置和运行此示例，请参阅GitHub.

class ConfigWrapper:
    """
    Encapsulates AWS Config functions.
    """
    def __init__(self, config_client):
        """
        :param config_client: A Boto3 AWS Config client.
        """
        self.config_client = config_client

    def put_config_rule(self, rule_name):
        """
        Sets a configuration rule that prohibits making Amazon S3 buckets publicly
        readable.

        :param rule_name: The name to give the rule.
        """
        try:
            self.config_client.put_config_rule(
                ConfigRule={
                    'ConfigRuleName': rule_name,
                    'Description': 'S3 Public Read Prohibited Bucket Rule',
                    'Scope': {
                        'ComplianceResourceTypes': [
                            'AWS::S3::Bucket',
                        ],
                    },
                    'Source': {
                        'Owner': 'AWS',
                        'SourceIdentifier': 'S3_BUCKET_PUBLIC_READ_PROHIBITED',
                    },
                    'InputParameters': '{}',
                    'ConfigRuleState': 'ACTIVE'
                }
            )
            logger.info("Created configuration rule %s.", rule_name)
        except ClientError:
            logger.exception("Couldn't create configuration rule %s.", rule_name)
            raise

• 有关于 AKPutConfigRule在AWS适用于 Python (Boto3) 的 SK.

有关 AWS 软件开发工具包开发人员指南和代码示例的完整列表，请参阅 将此服务与 AWS SDK 结合使用。本主题还包括有关入门的信息以及有关先前的软件开发工具包版本的详细信息。