aws.cfg.ConformancePack
Explore with Pulumi AI
Manages a Config Conformance Pack. More information about this collection of Config rules and remediation actions can be found in the Conformance Packs documentation. Sample Conformance Pack templates may be found in the AWS Config Rules Repository.
NOTE: The account must have a Configuration Recorder with proper IAM permissions before the Conformance Pack will successfully create or update. See also the
aws.cfg.Recorder
resource.
Example Usage
Template Body
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.cfg.ConformancePack("example", {
name: "example",
inputParameters: [{
parameterName: "AccessKeysRotatedParameterMaxAccessKeyAge",
parameterValue: "90",
}],
templateBody: `Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
`,
}, {
dependsOn: [exampleAwsConfigConfigurationRecorder],
});
import pulumi
import pulumi_aws as aws
example = aws.cfg.ConformancePack("example",
name="example",
input_parameters=[{
"parameter_name": "AccessKeysRotatedParameterMaxAccessKeyAge",
"parameter_value": "90",
}],
template_body="""Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
""",
opts = pulumi.ResourceOptions(depends_on=[example_aws_config_configuration_recorder]))
package main
import (
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cfg"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := cfg.NewConformancePack(ctx, "example", &cfg.ConformancePackArgs{
Name: pulumi.String("example"),
InputParameters: cfg.ConformancePackInputParameterArray{
&cfg.ConformancePackInputParameterArgs{
ParameterName: pulumi.String("AccessKeysRotatedParameterMaxAccessKeyAge"),
ParameterValue: pulumi.String("90"),
},
},
TemplateBody: pulumi.String(`Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
`),
}, pulumi.DependsOn([]pulumi.Resource{
exampleAwsConfigConfigurationRecorder,
}))
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var example = new Aws.Cfg.ConformancePack("example", new()
{
Name = "example",
InputParameters = new[]
{
new Aws.Cfg.Inputs.ConformancePackInputParameterArgs
{
ParameterName = "AccessKeysRotatedParameterMaxAccessKeyAge",
ParameterValue = "90",
},
},
TemplateBody = @"Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
",
}, new CustomResourceOptions
{
DependsOn =
{
exampleAwsConfigConfigurationRecorder,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.cfg.ConformancePack;
import com.pulumi.aws.cfg.ConformancePackArgs;
import com.pulumi.aws.cfg.inputs.ConformancePackInputParameterArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var example = new ConformancePack("example", ConformancePackArgs.builder()
.name("example")
.inputParameters(ConformancePackInputParameterArgs.builder()
.parameterName("AccessKeysRotatedParameterMaxAccessKeyAge")
.parameterValue("90")
.build())
.templateBody("""
Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
""")
.build(), CustomResourceOptions.builder()
.dependsOn(exampleAwsConfigConfigurationRecorder)
.build());
}
}
resources:
example:
type: aws:cfg:ConformancePack
properties:
name: example
inputParameters:
- parameterName: AccessKeysRotatedParameterMaxAccessKeyAge
parameterValue: '90'
templateBody: |
Parameters:
AccessKeysRotatedParameterMaxAccessKeyAge:
Type: String
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
options:
dependson:
- ${exampleAwsConfigConfigurationRecorder}
Template S3 URI
import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const exampleBucketV2 = new aws.s3.BucketV2("example", {bucket: "example"});
const exampleBucketObjectv2 = new aws.s3.BucketObjectv2("example", {
bucket: exampleBucketV2.id,
key: "example-key",
content: `Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
`,
});
const example = new aws.cfg.ConformancePack("example", {
name: "example",
templateS3Uri: pulumi.interpolate`s3://${exampleBucketV2.bucket}/${exampleBucketObjectv2.key}`,
}, {
dependsOn: [exampleAwsConfigConfigurationRecorder],
});
import pulumi
import pulumi_aws as aws
example_bucket_v2 = aws.s3.BucketV2("example", bucket="example")
example_bucket_objectv2 = aws.s3.BucketObjectv2("example",
bucket=example_bucket_v2.id,
key="example-key",
content="""Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
""")
example = aws.cfg.ConformancePack("example",
name="example",
template_s3_uri=pulumi.Output.all(
bucket=example_bucket_v2.bucket,
key=example_bucket_objectv2.key
).apply(lambda resolved_outputs: f"s3://{resolved_outputs['bucket']}/{resolved_outputs['key']}")
,
opts = pulumi.ResourceOptions(depends_on=[example_aws_config_configuration_recorder]))
package main
import (
"fmt"
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/cfg"
"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/s3"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
exampleBucketV2, err := s3.NewBucketV2(ctx, "example", &s3.BucketV2Args{
Bucket: pulumi.String("example"),
})
if err != nil {
return err
}
exampleBucketObjectv2, err := s3.NewBucketObjectv2(ctx, "example", &s3.BucketObjectv2Args{
Bucket: exampleBucketV2.ID(),
Key: pulumi.String("example-key"),
Content: pulumi.String(`Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
`),
})
if err != nil {
return err
}
_, err = cfg.NewConformancePack(ctx, "example", &cfg.ConformancePackArgs{
Name: pulumi.String("example"),
TemplateS3Uri: pulumi.All(exampleBucketV2.Bucket, exampleBucketObjectv2.Key).ApplyT(func(_args []interface{}) (string, error) {
bucket := _args[0].(string)
key := _args[1].(string)
return fmt.Sprintf("s3://%v/%v", bucket, key), nil
}).(pulumi.StringOutput),
}, pulumi.DependsOn([]pulumi.Resource{
exampleAwsConfigConfigurationRecorder,
}))
if err != nil {
return err
}
return nil
})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
var exampleBucketV2 = new Aws.S3.BucketV2("example", new()
{
Bucket = "example",
});
var exampleBucketObjectv2 = new Aws.S3.BucketObjectv2("example", new()
{
Bucket = exampleBucketV2.Id,
Key = "example-key",
Content = @"Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
",
});
var example = new Aws.Cfg.ConformancePack("example", new()
{
Name = "example",
TemplateS3Uri = Output.Tuple(exampleBucketV2.Bucket, exampleBucketObjectv2.Key).Apply(values =>
{
var bucket = values.Item1;
var key = values.Item2;
return $"s3://{bucket}/{key}";
}),
}, new CustomResourceOptions
{
DependsOn =
{
exampleAwsConfigConfigurationRecorder,
},
});
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.s3.BucketV2;
import com.pulumi.aws.s3.BucketV2Args;
import com.pulumi.aws.s3.BucketObjectv2;
import com.pulumi.aws.s3.BucketObjectv2Args;
import com.pulumi.aws.cfg.ConformancePack;
import com.pulumi.aws.cfg.ConformancePackArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
var exampleBucketV2 = new BucketV2("exampleBucketV2", BucketV2Args.builder()
.bucket("example")
.build());
var exampleBucketObjectv2 = new BucketObjectv2("exampleBucketObjectv2", BucketObjectv2Args.builder()
.bucket(exampleBucketV2.id())
.key("example-key")
.content("""
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
""")
.build());
var example = new ConformancePack("example", ConformancePackArgs.builder()
.name("example")
.templateS3Uri(Output.tuple(exampleBucketV2.bucket(), exampleBucketObjectv2.key()).applyValue(values -> {
var bucket = values.t1;
var key = values.t2;
return String.format("s3://%s/%s", bucket,key);
}))
.build(), CustomResourceOptions.builder()
.dependsOn(exampleAwsConfigConfigurationRecorder)
.build());
}
}
resources:
example:
type: aws:cfg:ConformancePack
properties:
name: example
templateS3Uri: s3://${exampleBucketV2.bucket}/${exampleBucketObjectv2.key}
options:
dependson:
- ${exampleAwsConfigConfigurationRecorder}
exampleBucketV2:
type: aws:s3:BucketV2
name: example
properties:
bucket: example
exampleBucketObjectv2:
type: aws:s3:BucketObjectv2
name: example
properties:
bucket: ${exampleBucketV2.id}
key: example-key
content: |
Resources:
IAMPasswordPolicy:
Properties:
ConfigRuleName: IAMPasswordPolicy
Source:
Owner: AWS
SourceIdentifier: IAM_PASSWORD_POLICY
Type: AWS::Config::ConfigRule
Create ConformancePack Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new ConformancePack(name: string, args?: ConformancePackArgs, opts?: CustomResourceOptions);
@overload
def ConformancePack(resource_name: str,
args: Optional[ConformancePackArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def ConformancePack(resource_name: str,
opts: Optional[ResourceOptions] = None,
delivery_s3_bucket: Optional[str] = None,
delivery_s3_key_prefix: Optional[str] = None,
input_parameters: Optional[Sequence[ConformancePackInputParameterArgs]] = None,
name: Optional[str] = None,
template_body: Optional[str] = None,
template_s3_uri: Optional[str] = None)
func NewConformancePack(ctx *Context, name string, args *ConformancePackArgs, opts ...ResourceOption) (*ConformancePack, error)
public ConformancePack(string name, ConformancePackArgs? args = null, CustomResourceOptions? opts = null)
public ConformancePack(String name, ConformancePackArgs args)
public ConformancePack(String name, ConformancePackArgs args, CustomResourceOptions options)
type: aws:cfg:ConformancePack
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args ConformancePackArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args ConformancePackArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args ConformancePackArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args ConformancePackArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args ConformancePackArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var conformancePackResource = new Aws.Cfg.ConformancePack("conformancePackResource", new()
{
DeliveryS3Bucket = "string",
DeliveryS3KeyPrefix = "string",
InputParameters = new[]
{
new Aws.Cfg.Inputs.ConformancePackInputParameterArgs
{
ParameterName = "string",
ParameterValue = "string",
},
},
Name = "string",
TemplateBody = "string",
TemplateS3Uri = "string",
});
example, err := cfg.NewConformancePack(ctx, "conformancePackResource", &cfg.ConformancePackArgs{
DeliveryS3Bucket: pulumi.String("string"),
DeliveryS3KeyPrefix: pulumi.String("string"),
InputParameters: cfg.ConformancePackInputParameterArray{
&cfg.ConformancePackInputParameterArgs{
ParameterName: pulumi.String("string"),
ParameterValue: pulumi.String("string"),
},
},
Name: pulumi.String("string"),
TemplateBody: pulumi.String("string"),
TemplateS3Uri: pulumi.String("string"),
})
var conformancePackResource = new ConformancePack("conformancePackResource", ConformancePackArgs.builder()
.deliveryS3Bucket("string")
.deliveryS3KeyPrefix("string")
.inputParameters(ConformancePackInputParameterArgs.builder()
.parameterName("string")
.parameterValue("string")
.build())
.name("string")
.templateBody("string")
.templateS3Uri("string")
.build());
conformance_pack_resource = aws.cfg.ConformancePack("conformancePackResource",
delivery_s3_bucket="string",
delivery_s3_key_prefix="string",
input_parameters=[{
"parameterName": "string",
"parameterValue": "string",
}],
name="string",
template_body="string",
template_s3_uri="string")
const conformancePackResource = new aws.cfg.ConformancePack("conformancePackResource", {
deliveryS3Bucket: "string",
deliveryS3KeyPrefix: "string",
inputParameters: [{
parameterName: "string",
parameterValue: "string",
}],
name: "string",
templateBody: "string",
templateS3Uri: "string",
});
type: aws:cfg:ConformancePack
properties:
deliveryS3Bucket: string
deliveryS3KeyPrefix: string
inputParameters:
- parameterName: string
parameterValue: string
name: string
templateBody: string
templateS3Uri: string
ConformancePack Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The ConformancePack resource accepts the following input properties:
- Delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- Delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- Input
Parameters List<ConformancePack Input Parameter> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - Name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- Template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- Template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- Delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- Delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- Input
Parameters []ConformancePack Input Parameter Args - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - Name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- Template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- Template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- delivery
S3Bucket String - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key StringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters List<ConformancePack Input Parameter> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name String
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body String - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri String - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters ConformancePack Input Parameter[] - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- delivery_
s3_ strbucket - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery_
s3_ strkey_ prefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input_
parameters Sequence[ConformancePack Input Parameter Args] - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name str
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template_
body str - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template_
s3_ struri - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- delivery
S3Bucket String - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key StringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters List<Property Map> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name String
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body String - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri String - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
Outputs
All input properties are implicitly available as output properties. Additionally, the ConformancePack resource produces the following output properties:
Look up Existing ConformancePack Resource
Get an existing ConformancePack resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: ConformancePackState, opts?: CustomResourceOptions): ConformancePack
@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
arn: Optional[str] = None,
delivery_s3_bucket: Optional[str] = None,
delivery_s3_key_prefix: Optional[str] = None,
input_parameters: Optional[Sequence[ConformancePackInputParameterArgs]] = None,
name: Optional[str] = None,
template_body: Optional[str] = None,
template_s3_uri: Optional[str] = None) -> ConformancePack
func GetConformancePack(ctx *Context, name string, id IDInput, state *ConformancePackState, opts ...ResourceOption) (*ConformancePack, error)
public static ConformancePack Get(string name, Input<string> id, ConformancePackState? state, CustomResourceOptions? opts = null)
public static ConformancePack get(String name, Output<String> id, ConformancePackState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Arn string
- Amazon Resource Name (ARN) of the conformance pack.
- Delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- Delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- Input
Parameters List<ConformancePack Input Parameter> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - Name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- Template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- Template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- Arn string
- Amazon Resource Name (ARN) of the conformance pack.
- Delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- Delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- Input
Parameters []ConformancePack Input Parameter Args - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - Name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- Template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- Template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- arn String
- Amazon Resource Name (ARN) of the conformance pack.
- delivery
S3Bucket String - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key StringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters List<ConformancePack Input Parameter> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name String
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body String - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri String - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- arn string
- Amazon Resource Name (ARN) of the conformance pack.
- delivery
S3Bucket string - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key stringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters ConformancePack Input Parameter[] - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name string
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body string - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri string - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- arn str
- Amazon Resource Name (ARN) of the conformance pack.
- delivery_
s3_ strbucket - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery_
s3_ strkey_ prefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input_
parameters Sequence[ConformancePack Input Parameter Args] - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name str
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template_
body str - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template_
s3_ struri - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
- arn String
- Amazon Resource Name (ARN) of the conformance pack.
- delivery
S3Bucket String - Amazon S3 bucket where AWS Config stores conformance pack templates. Maximum length of 63.
- delivery
S3Key StringPrefix - The prefix for the Amazon S3 bucket. Maximum length of 1024.
- input
Parameters List<Property Map> - Set of configuration blocks describing input parameters passed to the conformance pack template. Documented below. When configured, the parameters must also be included in the
template_body
or in the template stored in Amazon S3 if usingtemplate_s3_uri
. - name String
- The name of the conformance pack. Must begin with a letter and contain from 1 to 256 alphanumeric characters and hyphens.
- template
Body String - A string containing full conformance pack template body. Maximum length of 51200. Drift detection is not possible with this argument.
- template
S3Uri String - Location of file, e.g.,
s3://bucketname/prefix
, containing the template body. The uri must point to the conformance pack template that is located in an Amazon S3 bucket in the same region as the conformance pack. Maximum length of 1024. Drift detection is not possible with this argument.
Supporting Types
ConformancePackInputParameter, ConformancePackInputParameterArgs
- Parameter
Name string - The input key.
- Parameter
Value string - The input value.
- Parameter
Name string - The input key.
- Parameter
Value string - The input value.
- parameter
Name String - The input key.
- parameter
Value String - The input value.
- parameter
Name string - The input key.
- parameter
Value string - The input value.
- parameter_
name str - The input key.
- parameter_
value str - The input value.
- parameter
Name String - The input key.
- parameter
Value String - The input value.
Import
Using pulumi import
, import Config Conformance Packs using the name
. For example:
$ pulumi import aws:cfg/conformancePack:ConformancePack example example
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- AWS Classic pulumi/pulumi-aws
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
aws
Terraform Provider.