Skip to content
AWS for Query.Farm

aws.cloudformation.list_stack_instance_resource_drifts

Example SQL Queries

SELECT * FROM
aws.cloudformation.list_stack_instance_resource_drifts
WHERE
"stack_set_name" = 'VALUE'
AND "stack_instance_account" = 'VALUE'
AND "stack_instance_region" = 'VALUE'
AND "operation_id" = 'VALUE';

Description

Returns drift information for resources in a stack instance.

ListStackInstanceResourceDrifts returns drift information for the most recent drift detection operation. If an operation is in progress, it may only return partial results.

Table Definition

Column NameColumn Data Type
operation_id Required Input Column

The unique ID of the drift operation.

VARCHAR
stack_instance_account Required Input Column

The name of the Amazon Web Services account that you want to list resource drifts for.

VARCHAR
stack_instance_region Required Input Column

The name of the Region where you want to list resource drifts.

VARCHAR
stack_set_name Required Input Column

The name or unique ID of the stack set that you want to list drifted resources for.

VARCHAR
call_as Input Column

[Service-managed permissions] Specifies whether you are acting as an account administrator in the organization's management account or as a delegated administrator in a member account.

By default, SELF is specified. Use SELF for stack sets with self-managed permissions.

  • If you are signed in to the management account, specify SELF.

  • If you are signed in to a delegated administrator account, specify DELEGATED_ADMIN.

    Your Amazon Web Services account must be registered as a delegated administrator in the management account. For more information, see Register a delegated administrator in the CloudFormation User Guide.

VARCHAR
max_results Input Column

The maximum number of results to be returned with a single call. If the number of available results exceeds this maximum, the response includes a NextToken value that you can assign to the NextToken request parameter to get the next set of results.

BIGINT
next_token Input Column

If the previous paginated request didn't return all of the remaining results, the response object's NextToken parameter value is set to a token. To retrieve the next set of results, call this action again and assign that token to the request object's NextToken parameter. If there are no remaining results, the previous response object's NextToken parameter is set to null.

VARCHAR
stack_instance_resource_drift_statuses Input Column

The resource drift status of the stack instance.

  • DELETED: The resource differs from its expected template configuration in that the resource has been deleted.

  • MODIFIED: One or more resource properties differ from their expected template values.

  • IN_SYNC: The resource's actual configuration matches its expected template configuration.

  • NOT_CHECKED: CloudFormation doesn't currently return this value.

VARCHAR[]
Show child fields
stack_instance_resource_drift_statuses[]
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
summaries

A list of StackInstanceResourceDriftsSummary structures that contain information about the specified stack instances.

STRUCT(
    "stack_id" VARCHAR,
    "logical_resource_id" VARCHAR,
    "physical_resource_id" VARCHAR,
    "physical_resource_id_context" STRUCT(
        "key" VARCHAR,
        "value" VARCHAR
    )[],
    "resource_type" VARCHAR,
    "property_differences" STRUCT(
        "property_path" VARCHAR,
        "expected_value" VARCHAR,
        "actual_value" VARCHAR,
        "difference_type" VARCHAR
    )[],
    "stack_resource_drift_status" VARCHAR,
    "timestamp" TIMESTAMP_S
)[]
Show child fields
summaries[]
Show child fields
summaries[].logical_resource_id

The logical name of the resource specified in the template.

summaries[].physical_resource_id

The name or unique identifier that corresponds to a physical instance ID of a resource supported by CloudFormation.

summaries[].physical_resource_id_context[]
Show child fields
summaries[].physical_resource_id_context[].key

The resource context key.

summaries[].physical_resource_id_context[].value

The resource context value.

summaries[].property_differences[]
Show child fields
summaries[].property_differences[].actual_value

The actual property value of the resource property.

summaries[].property_differences[].difference_type

The type of property difference.

  • ADD: A value has been added to a resource property that's an array or list data type.

  • REMOVE: The property has been removed from the current resource configuration.

  • NOT_EQUAL: The current property value differs from its expected value (as defined in the stack template and any values specified as template parameters).

summaries[].property_differences[].expected_value

The expected property value of the resource property, as defined in the stack template and any values specified as template parameters.

summaries[].property_differences[].property_path

The fully-qualified path to the resource property.

summaries[].resource_type

Type of resource. For more information, go to Amazon Web Services Resource Types Reference in the CloudFormation User Guide.

summaries[].stack_id

The ID of the stack instance.

summaries[].stack_resource_drift_status

The drift status of the resource in a stack instance.

  • DELETED: The resource differs from its expected template configuration in that the resource has been deleted.

  • MODIFIED: One or more resource properties differ from their expected template values.

  • IN_SYNC: The resource's actual configuration matches its expected template configuration.

  • NOT_CHECKED: CloudFormation doesn't currently return this value.

summaries[].timestamp

Time at which the stack instance drift detection operation was initiated.