aws_resiliencehub_application

account_id

Type: STRING

app_arn

Type: STRING
Provider name: appArn
Description: Amazon Resource Name (ARN) of the Resilience Hub application. The format for this ARN is: arn:partition:resiliencehub:region:account:app/app-id. For more information about ARNs, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference guide.

assessment_schedule

Type: STRING
Provider name: assessmentSchedule
Description: Assessment execution schedule with ‘Daily’ or ‘Disabled’ values.

aws_application_arn

Type: STRING
Provider name: awsApplicationArn
Description: Amazon Resource Name (ARN) of Resource Groups group that is integrated with an AppRegistry application. For more information about ARNs, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference guide.

compliance_status

Type: STRING
Provider name: complianceStatus
Description: Current status of compliance for the resiliency policy.

creation_time

Type: TIMESTAMP
Provider name: creationTime
Description: Date and time when the application was created.

description

Type: STRING
Provider name: description
Description: Optional description for an application.

drift_status

Type: STRING
Provider name: driftStatus
Description: Indicates if compliance drifts (deviations) were detected while running an assessment for your application.

event_subscriptions

Type: UNORDERED_LIST_STRUCT
Provider name: eventSubscriptions
Description: The list of events you would like to subscribe and get notification for. Currently, Resilience Hub supports notifications only for Drift detected and Scheduled assessment failure events.

• event_type
  Type: STRING
  Provider name: eventType
  Description: The type of event you would like to subscribe and get notification for. Currently, Resilience Hub supports notifications only for Drift detected (DriftDetected) and Scheduled assessment failure (ScheduledAssessmentFailure) events.
  
• name
  Type: STRING
  Provider name: name
  Description: Unique name to identify an event subscription.
  
• sns_topic_arn
  Type: STRING
  Provider name: snsTopicArn
  Description: Amazon Resource Name (ARN) of the Amazon Simple Notification Service topic. The format for this ARN is: arn:partition:sns:region:account:topic-name. For more information about ARNs, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference guide.
  

last_app_compliance_evaluation_time

Type: TIMESTAMP
Provider name: lastAppComplianceEvaluationTime
Description: Date and time the most recent compliance evaluation.

last_drift_evaluation_time

Type: TIMESTAMP
Provider name: lastDriftEvaluationTime
Description: Indicates the last time that a drift was evaluated.

last_resiliency_score_evaluation_time

Type: TIMESTAMP
Provider name: lastResiliencyScoreEvaluationTime
Description: Date and time the most recent resiliency score evaluation.

name

Type: STRING
Provider name: name
Description: Name for the application.

permission_model

Type: STRUCT
Provider name: permissionModel
Description: Defines the roles and credentials that Resilience Hub would use while creating the application, importing its resources, and running an assessment.

• cross_account_role_arns
  Type: UNORDERED_LIST_STRING
  Provider name: crossAccountRoleArns
  Description: Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application.
  • These ARNs are required only when your resources are in other accounts and you have different role name in these accounts. Else, the invoker role name will be used in the other accounts.
  • These roles must have a trust policy with iam:AssumeRole permission to the invoker role in the primary account.
  
  
• invoker_role_name
  Type: STRING
  Provider name: invokerRoleName
  Description: Existing Amazon Web Services IAM role name in the primary Amazon Web Services account that will be assumed by Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment. If your IAM role includes a path, you must include the path in the invokerRoleName parameter. For example, if your IAM role’s ARN is arn:aws:iam:123456789012:role/my-path/role-name, you should pass my-path/role-name.
  • You must have iam:passRole permission for this role while creating or updating the application.
  • Currently, invokerRoleName accepts only [A-Za-z0-9_+=,.@-] characters.
  
  
• type
  Type: STRING
  Provider name: type
  Description: Defines how Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your Amazon Web Services account, or by using the credentials of the current IAM user.
  

policy_arn

Type: STRING
Provider name: policyArn
Description: Amazon Resource Name (ARN) of the resiliency policy. The format for this ARN is: arn:partition:resiliencehub:region:account:resiliency-policy/policy-id. For more information about ARNs, see Amazon Resource Names (ARNs) in the Amazon Web Services General Reference guide.

resiliency_score

Type: DOUBLE
Provider name: resiliencyScore
Description: Current resiliency score for the application.

rpo_in_secs

Type: INT32
Provider name: rpoInSecs
Description: Recovery Point Objective (RPO) in seconds.

rto_in_secs

Type: INT32
Provider name: rtoInSecs
Description: Recovery Time Objective (RTO) in seconds.

status

Type: STRING
Provider name: status
Description: Status of the application.

tags

Type: UNORDERED_LIST_STRING