- 필수 기능
- 앱 내
- 서비스 관리
- 인프라스트럭처
- 애플리케이션 성능
- 디지털 경험
- 소프트웨어 제공
- 보안
- 로그 관리
- 관리
- 인프라스트럭처
- ci
- containers
- csm
- ndm
- otel_guides
- overview
- slos
- synthetics
- tests
- 워크플로
account_id
Type: STRING
name
Type: STRING
Provider name: name
Description: The name of the configuration recorder. Config automatically assigns the name of “default” when creating the configuration recorder. You cannot change the name of the configuration recorder after it has been created. To change the configuration recorder name, you must delete it and create a new configuration recorder with a new name.
recording_group
Type: STRUCT
Provider name: recordingGroup
Description: Specifies which resource types Config records for configuration changes.
all_supported
BOOLEAN
allSupported
true
, when Config adds support for a new regionally recorded resource type, Config starts recording resources of that type automatically. If you set this field to true
, you cannot enumerate specific resource types to record in the resourceTypes
field of RecordingGroup, or to exclude in the resourceTypes
field of ExclusionByResourceTypes. exclusion_by_resource_types
STRUCT
exclusionByResourceTypes
useOnly
field of RecordingStrategy to EXCLUSION_BY_RESOURCE_TYPES
.resource_types
UNORDERED_LIST_STRING
resourceTypes
include_global_resource_types
BOOLEAN
includeGlobalResourceTypes
AWS::RDS::GlobalCluster
resource type will be recorded in all supported Config Regions where the configuration recorder is enabled, even if includeGlobalResourceTypes
is not set to true
. includeGlobalResourceTypes
is a legacy field which only applies to IAM users, groups, roles, and customer managed policies. If you do not want to record AWS::RDS::GlobalCluster
in all enabled Regions, use one of the following recording strategies:EXCLUSION_BY_RESOURCE_TYPES
), orINCLUSION_BY_RESOURCE_TYPES
).true
, set the allSupported
field of RecordingGroup to true
. Optionally, you can set the useOnly
field of RecordingStrategy to ALL_SUPPORTED_RESOURCE_TYPES
. false
but list globally recorded IAM resource types in the resourceTypes
field of RecordingGroup, Config will still record configuration changes for those specified resource types regardless of if you set the includeGlobalResourceTypes
field to false. If you do not want to record configuration changes to the globally recorded IAM resource types (IAM users, groups, roles, and customer managed policies), make sure to not list them in the resourceTypes
field in addition to setting the includeGlobalResourceTypes
field to false.recording_strategy
STRUCT
recordingStrategy
useOnly
field of RecordingStrategy to ALL_SUPPORTED_RESOURCE_TYPES
, Config records configuration changes for all supported regionally recorded resource types. You also must set the allSupported
field of RecordingGroup to true
. When Config adds support for a new regionally recorded resource type, Config automatically starts recording resources of that type.useOnly
field of RecordingStrategy to INCLUSION_BY_RESOURCE_TYPES
, Config records configuration changes for only the resource types you specify in the resourceTypes
field of RecordingGroup.useOnly
field of RecordingStrategy to EXCLUSION_BY_RESOURCE_TYPES
, Config records configuration changes for all supported resource types except the resource types that you specify to exclude from being recorded in the resourceTypes
field of ExclusionByResourceTypes.recordingStrategy
field is optional when you set the allSupported
field of RecordingGroup to true
. The recordingStrategy
field is optional when you list resource types in the resourceTypes
field of RecordingGroup. The recordingStrategy
field is required if you list resource types to exclude from recording in the resourceTypes
field of ExclusionByResourceTypes. EXCLUSION_BY_RESOURCE_TYPES
for the recording strategy, the exclusionByResourceTypes
field will override other properties in the request. For example, even if you set includeGlobalResourceTypes
to false, globally recorded IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the resourceTypes
field of exclusionByResourceTypes
. EXCLUSION_BY_RESOURCE_TYPES
recording strategy, when Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, Config starts recording resources of that type automatically. In addition, unless specifically listed as exclusions, AWS::RDS::GlobalCluster
will be recorded automatically in all supported Config Regions were the configuration recorder is enabled. IAM users, groups, roles, and customer managed policies will be recorded automatically in all enabled Config Regions where Config was available before February 2022. This list does not include the following Regions:use_only
STRING
useOnly
ALL_SUPPORTED_RESOURCE_TYPES
, Config records configuration changes for all supported regionally recorded resource types. You also must set the allSupported
field of RecordingGroup to true
. When Config adds support for a new regionally recorded resource type, Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the Config developer guide.INCLUSION_BY_RESOURCE_TYPES
, Config records configuration changes for only the resource types that you specify in the resourceTypes
field of RecordingGroup.EXCLUSION_BY_RESOURCE_TYPES
, Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the resourceTypes
field of ExclusionByResourceTypes.recordingStrategy
field is optional when you set the allSupported
field of RecordingGroup to true
. The recordingStrategy
field is optional when you list resource types in the resourceTypes
field of RecordingGroup. The recordingStrategy
field is required if you list resource types to exclude from recording in the resourceTypes
field of ExclusionByResourceTypes. EXCLUSION_BY_RESOURCE_TYPES
for the recording strategy, the exclusionByResourceTypes
field will override other properties in the request. For example, even if you set includeGlobalResourceTypes
to false, globally recorded IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the resourceTypes
field of exclusionByResourceTypes
. EXCLUSION_BY_RESOURCE_TYPES
recording strategy, when Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, Config starts recording resources of that type automatically. In addition, unless specifically listed as exclusions, AWS::RDS::GlobalCluster
will be recorded automatically in all supported Config Regions were the configuration recorder is enabled. IAM users, groups, roles, and customer managed policies will be recorded automatically in all enabled Config Regions where Config was available before February 2022. This list does not include the following Regions:resource_types
UNORDERED_LIST_STRING
resourceTypes
useOnly
field of RecordingStrategy to INCLUSION_BY_RESOURCE_TYPES
. To record all configuration changes, set the allSupported
field of RecordingGroup to true
, and either omit this field or don’t specify any resource types in this field. If you set the allSupported
field to false
and specify values for resourceTypes
, when Config adds support for a new type of resource, it will not record resources of that type unless you manually add that type to your recording group. For a list of valid resourceTypes
values, see the Resource Type Value column in Supported Amazon Web Services resource Types in the Config developer guide. role_arn
Type: STRING
Provider name: roleARN
Description: Amazon Resource Name (ARN) of the IAM role assumed by Config and used by the configuration recorder. roleARN
for the configuration recorder.
tags
Type: UNORDERED_LIST_STRING