GetComplianceDetailsByResource

class ConfigService.Paginator.GetComplianceDetailsByResource
paginator = client.get_paginator('get_compliance_details_by_resource')
paginate(**kwargs)

Creates an iterator that will paginate through responses from ConfigService.Client.get_compliance_details_by_resource().

See also: AWS API Documentation

Request Syntax

response_iterator = paginator.paginate(
    ResourceType='string',
    ResourceId='string',
    ComplianceTypes=[
        'COMPLIANT'|'NON_COMPLIANT'|'NOT_APPLICABLE'|'INSUFFICIENT_DATA',
    ],
    ResourceEvaluationId='string',
    PaginationConfig={
        'MaxItems': 123,
        'StartingToken': 'string'
    }
)
Parameters
  • ResourceType (string) -- The type of the Amazon Web Services resource for which you want compliance information.
  • ResourceId (string) -- The ID of the Amazon Web Services resource for which you want compliance information.
  • ComplianceTypes (list) --

    Filters the results by compliance.

    INSUFFICIENT_DATA is a valid ComplianceType that is returned when an Config rule cannot be evaluated. However, INSUFFICIENT_DATA cannot be used as a ComplianceType for filtering results.
    • (string) --
  • ResourceEvaluationId (string) --

    The unique ID of Amazon Web Services resource execution for which you want to retrieve evaluation results.

    Note

    You need to only provide either a ResourceEvaluationID or a ResourceID and ResourceType .

  • PaginationConfig (dict) --

    A dictionary that provides parameters to control pagination.

    • MaxItems (integer) --

      The total number of items to return. If the total number of items available is more than the value specified in max-items then a NextToken will be provided in the output that you can use to resume pagination.

    • StartingToken (string) --

      A token to specify where to start paginating. This is the NextToken from a previous response.

Return type

dict

Returns

Response Syntax

{
    'EvaluationResults': [
        {
            'EvaluationResultIdentifier': {
                'EvaluationResultQualifier': {
                    'ConfigRuleName': 'string',
                    'ResourceType': 'string',
                    'ResourceId': 'string',
                    'EvaluationMode': 'DETECTIVE'|'PROACTIVE'
                },
                'OrderingTimestamp': datetime(2015, 1, 1),
                'ResourceEvaluationId': 'string'
            },
            'ComplianceType': 'COMPLIANT'|'NON_COMPLIANT'|'NOT_APPLICABLE'|'INSUFFICIENT_DATA',
            'ResultRecordedTime': datetime(2015, 1, 1),
            'ConfigRuleInvokedTime': datetime(2015, 1, 1),
            'Annotation': 'string',
            'ResultToken': 'string'
        },
    ],

}

Response Structure

  • (dict) --

    • EvaluationResults (list) --

      Indicates whether the specified Amazon Web Services resource complies each Config rule.

      • (dict) --

        The details of an Config evaluation. Provides the Amazon Web Services resource that was evaluated, the compliance of the resource, related time stamps, and supplementary information.

        • EvaluationResultIdentifier (dict) --

          Uniquely identifies the evaluation result.

          • EvaluationResultQualifier (dict) --

            Identifies an Config rule used to evaluate an Amazon Web Services resource, and provides the type and ID of the evaluated resource.

            • ConfigRuleName (string) --

              The name of the Config rule that was used in the evaluation.

            • ResourceType (string) --

              The type of Amazon Web Services resource that was evaluated.

            • ResourceId (string) --

              The ID of the evaluated Amazon Web Services resource.

            • EvaluationMode (string) --

              The mode of an evaluation. The valid values are Detective or Proactive.

          • OrderingTimestamp (datetime) --

            The time of the event that triggered the evaluation of your Amazon Web Services resources. The time can indicate when Config delivered a configuration item change notification, or it can indicate when Config delivered the configuration snapshot, depending on which event triggered the evaluation.

          • ResourceEvaluationId (string) --

            A Unique ID for an evaluation result.

        • ComplianceType (string) --

          Indicates whether the Amazon Web Services resource complies with the Config rule that evaluated it.

          For the EvaluationResult data type, Config supports only the COMPLIANT , NON_COMPLIANT , and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type.

        • ResultRecordedTime (datetime) --

          The time when Config recorded the evaluation result.

        • ConfigRuleInvokedTime (datetime) --

          The time when the Config rule evaluated the Amazon Web Services resource.

        • Annotation (string) --

          Supplementary information about how the evaluation determined the compliance.

        • ResultToken (string) --

          An encrypted token that associates an evaluation with an Config rule. The token identifies the rule, the Amazon Web Services resource being evaluated, and the event that triggered the evaluation.