Skip to content
AWS for Query.Farm

aws.config.get_aggregate_resource_config

Example SQL Queries

SELECT * FROM
aws.config.get_aggregate_resource_config
WHERE
"configuration_aggregator_name" = 'VALUE'
AND "resource_identifier" = 'VALUE';

Description

Returns configuration item that is aggregated for your specific resource in a specific source account and region.

Table Definition

Column NameColumn Data Type
configuration_aggregator_name Required Input Column

The name of the configuration aggregator.

VARCHAR
resource_identifier Required Input Column

An object that identifies aggregate resource.

STRUCT(
    "source_account_id" VARCHAR,
    "source_region" VARCHAR,
    "resource_id" VARCHAR,
    "resource_type" VARCHAR,
    "resource_name" VARCHAR
)
Show child fields
resource_identifier.resource_id

The ID of the Amazon Web Services resource.

resource_identifier.resource_name

The name of the Amazon Web Services resource.

resource_identifier.resource_type

The type of the Amazon Web Services resource.

resource_identifier.source_account_id

The 12-digit account ID of the source account.

resource_identifier.source_region

The source region where data is aggregated.

_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
    "type" VARCHAR,
    "name" VARCHAR,
    "account_id" VARCHAR,
    "via_profile_name" VARCHAR,
    "assumed_role_arn" VARCHAR,
    "organization" STRUCT(
        "account_name" VARCHAR,
        "id" VARCHAR,
        "tags" STRUCT(
            "key" VARCHAR,
            "value" VARCHAR
        )[],
        "master_account" STRUCT(
            "id" VARCHAR,
            "email" VARCHAR
        ),
        "parents" STRUCT(
            "type" VARCHAR,
            "id" VARCHAR,
            "name" VARCHAR,
            "tags" STRUCT(
                "key" VARCHAR,
                "value" VARCHAR
            )[]
        )[]
    )
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
configuration_item

Returns a ConfigurationItem object.

STRUCT(
    "version" VARCHAR,
    "account_id" VARCHAR,
    "configuration_item_capture_time" TIMESTAMP_S,
    "configuration_item_status" VARCHAR,
    "configuration_state_id" VARCHAR,
    "configuration_item_md5_hash" VARCHAR,
    "arn" VARCHAR,
    "resource_type" VARCHAR,
    "resource_id" VARCHAR,
    "resource_name" VARCHAR,
    "aws_region" VARCHAR,
    "availability_zone" VARCHAR,
    "resource_creation_time" TIMESTAMP_S,
    "tags" MAP(VARCHAR, VARCHAR),
    "related_events" VARCHAR[],
    "relationships" STRUCT(
        "resource_type" VARCHAR,
        "resource_id" VARCHAR,
        "resource_name" VARCHAR,
        "relationship_name" VARCHAR
    )[],
    "configuration" VARCHAR,
    "supplementary_configuration" MAP(VARCHAR, VARCHAR),
    "recording_frequency" VARCHAR,
    "configuration_item_delivery_time" TIMESTAMP_S
)
Show child fields
configuration_item.account_id

The 12-digit Amazon Web Services account ID associated with the resource.

configuration_item.arn

Amazon Resource Name (ARN) associated with the resource.

configuration_item.availability_zone

The Availability Zone associated with the resource.

configuration_item.aws_region

The region where the resource resides.

configuration_item.configuration

The description of the resource configuration.

configuration_item.configuration_item_capture_time

The time when the recording of configuration changes was initiated for the resource.

configuration_item.configuration_item_delivery_time

The time when configuration changes for the resource were delivered.

This field is optional and is not guaranteed to be present in a configuration item (CI). If you are using daily recording, this field will be populated. However, if you are using continuous recording, this field will be omitted since the delivery time is instantaneous as the CI is available right away. For more information on daily recording and continuous recording, see Recording Frequency in the Config Developer Guide.

configuration_item.configuration_item_md5_hash

Unique MD5 hash that represents the configuration item's state.

You can use MD5 hash to compare the states of two or more configuration items that are associated with the same resource.

configuration_item.configuration_item_status

The configuration item status. Valid values include:

  • OK – The resource configuration has been updated

  • ResourceDiscovered – The resource was newly discovered

  • ResourceNotRecorded – The resource was discovered but its configuration was not recorded since the recorder doesn't record resources of this type

  • ResourceDeleted – The resource was deleted

  • ResourceDeletedNotRecorded – The resource was deleted but its configuration was not recorded since the recorder doesn't record resources of this type

configuration_item.configuration_state_id

An identifier that indicates the ordering of the configuration items of a resource.

configuration_item.recording_frequency

The recording frequency that Config uses to record configuration changes for the resource.

configuration_item.related_events[]
configuration_item.relationships[]
Show child fields
configuration_item.relationships[].relationship_name

The type of relationship with the related resource.

configuration_item.relationships[].resource_id

The ID of the related resource (for example, sg-xxxxxx).

configuration_item.relationships[].resource_name

The custom name of the related resource, if available.

configuration_item.relationships[].resource_type

The resource type of the related resource.

configuration_item.resource_creation_time

The time stamp when the resource was created.

configuration_item.resource_id

The ID of the resource (for example, sg-xxxxxx).

configuration_item.resource_name

The custom name of the resource, if available.

configuration_item.resource_type

The type of Amazon Web Services resource.

configuration_item.supplementary_configuration

Configuration attributes that Config returns for certain resource types to supplement the information returned for the configuration parameter.

configuration_item.tags

A mapping of key value tags associated with the resource.

configuration_item.version

The version number of the resource configuration.