| Column Name | Column Data Type |
|---|
compliance_types Input Column
Filters the results by compliance. INSUFFICIENT_DATA is a valid ComplianceType that is returned when an Config rule cannot be evaluated. However, INSUFFICIENT_DATA cannot be used as a ComplianceType for filtering results. | VARCHAR[] |
Show child fields- compliance_types[]
|
resource_evaluation_id Input Column
The unique ID of Amazon Web Services resource execution for which you want to retrieve evaluation results. You need to only provide either a ResourceEvaluationID or a ResourceID and ResourceType. | VARCHAR |
resource_id Input Column
The ID of the Amazon Web Services resource for which you want compliance information. | VARCHAR |
resource_type Input Column
The type of the Amazon Web Services resource for which you want compliance information. | VARCHAR |
_aws_profile Input Column
The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role. | STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
) |
Show child fields- _aws_profile.account_id
The AWS account id - _aws_profile.assumed_role_arn
The ARN of the assumed role - _aws_profile.name
The unique name of the profile. - _aws_profile.organization
Information about this profile's membership in the AWS organization. Show child fields- _aws_profile.organization.account_name
The name of account speciifed by the organization - _aws_profile.organization.id
The organization id - _aws_profile.organization.master_account
Show child fields- _aws_profile.organization.master_account.email
The organization master account email address - _aws_profile.organization.master_account.id
The organization master account id
- _aws_profile.organization.parents[]
Show child fields- _aws_profile.organization.parents[].id
The id of the parent - _aws_profile.organization.parents[].name
The name of the parent - _aws_profile.organization.parents[].tags[]
Show child fields- _aws_profile.organization.parents[].tags[].key
- _aws_profile.organization.parents[].tags[].value
- _aws_profile.organization.parents[].type
The type of parent can be an organization unit or a root
- _aws_profile.organization.tags[]
Show child fields- _aws_profile.organization.tags[].key
- _aws_profile.organization.tags[].value
- _aws_profile.type
The type of profile, either 'credentials' or 'assumed_role' - _aws_profile.via_profile_name
This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
|
_aws_region Input Column
The AWS region to use. | VARCHAR |
annotation
Supplementary information about how the evaluation determined the compliance. | VARCHAR |
compliance_type
Indicates whether the Amazon Web Services resource complies with the Config rule that evaluated it. For the EvaluationResult data type, Config supports only the COMPLIANT, NON_COMPLIANT, and NOT_APPLICABLE values. Config does not support the INSUFFICIENT_DATA value for the EvaluationResult data type. | VARCHAR |
config_rule_invoked_time
The time when the Config rule evaluated the Amazon Web Services resource. | TIMESTAMP_S |
evaluation_result_identifier
Uniquely identifies the evaluation result. | STRUCT(
"evaluation_result_qualifier" STRUCT(
"config_rule_name" VARCHAR,
"resource_type" VARCHAR,
"resource_id" VARCHAR,
"evaluation_mode" VARCHAR
),
"ordering_timestamp" TIMESTAMP_S,
"resource_evaluation_id" VARCHAR
) |
Show child fields- evaluation_result_identifier.evaluation_result_qualifier
Identifies an Config rule used to evaluate an Amazon Web Services resource, and provides the type and ID of the evaluated resource. Show child fields- evaluation_result_identifier.evaluation_result_qualifier.config_rule_name
The name of the Config rule that was used in the evaluation. - evaluation_result_identifier.evaluation_result_qualifier.evaluation_mode
The mode of an evaluation. The valid values are Detective or Proactive. - evaluation_result_identifier.evaluation_result_qualifier.resource_id
The ID of the evaluated Amazon Web Services resource. - evaluation_result_identifier.evaluation_result_qualifier.resource_type
The type of Amazon Web Services resource that was evaluated.
- evaluation_result_identifier.ordering_timestamp
The time of the event that triggered the evaluation of your Amazon Web Services resources. The time can indicate when Config delivered a configuration item change notification, or it can indicate when Config delivered the configuration snapshot, depending on which event triggered the evaluation. - evaluation_result_identifier.resource_evaluation_id
A Unique ID for an evaluation result.
|
result_recorded_time
The time when Config recorded the evaluation result. | TIMESTAMP_S |
result_token
An encrypted token that associates an evaluation with an Config rule. The token identifies the rule, the Amazon Web Services resource being evaluated, and the event that triggered the evaluation. | VARCHAR |