Smaws_Client_ConfigService.DescribeComplianceByConfigRule
val request :
Smaws_Lib.Context.t ->
describe_compliance_by_config_rule_request ->
(describe_compliance_by_config_rule_response,
[> Smaws_Lib.Protocols.AwsJson.error
| `InvalidNextTokenException of invalid_next_token_exception
| `InvalidParameterValueException of invalid_parameter_value_exception
| `NoSuchConfigRuleException of no_such_config_rule_exception ])
Stdlib.result
Indicates whether the specified Config rules are compliant. If a rule is noncompliant, this action returns the number of Amazon Web Services resources that do not comply with the rule.
A rule is compliant if all of the evaluated resources comply with it. It is noncompliant if any of these resources do not comply.
If Config has no current evaluation results for the rule, it returns INSUFFICIENT_DATA
. This result might indicate one of the following conditions:
DescribeConfigRuleEvaluationStatus
action to get the LastSuccessfulInvocationTime
and LastFailedInvocationTime
.config:PutEvaluations
permission. If the rule is a custom rule, verify that the Lambda execution role includes the config:PutEvaluations
permission.NOT_APPLICABLE
for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.