-
Notifications
You must be signed in to change notification settings - Fork 17
/
CfnConfigRuleProps.go
109 lines (106 loc) · 5.79 KB
/
CfnConfigRuleProps.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
package awsconfig
// Properties for defining a `CfnConfigRule`.
//
// Example:
// // The code below shows an example of how to instantiate this type.
// // The values are placeholders you should change.
// import "github.com/aws/aws-cdk-go/awscdk"
//
// var inputParameters interface{}
//
// cfnConfigRuleProps := &CfnConfigRuleProps{
// Source: &SourceProperty{
// Owner: jsii.String("owner"),
//
// // the properties below are optional
// CustomPolicyDetails: &CustomPolicyDetailsProperty{
// EnableDebugLogDelivery: jsii.Boolean(false),
// PolicyRuntime: jsii.String("policyRuntime"),
// PolicyText: jsii.String("policyText"),
// },
// SourceDetails: []interface{}{
// &SourceDetailProperty{
// EventSource: jsii.String("eventSource"),
// MessageType: jsii.String("messageType"),
//
// // the properties below are optional
// MaximumExecutionFrequency: jsii.String("maximumExecutionFrequency"),
// },
// },
// SourceIdentifier: jsii.String("sourceIdentifier"),
// },
//
// // the properties below are optional
// Compliance: &ComplianceProperty{
// Type: jsii.String("type"),
// },
// ConfigRuleName: jsii.String("configRuleName"),
// Description: jsii.String("description"),
// EvaluationModes: []interface{}{
// &EvaluationModeConfigurationProperty{
// Mode: jsii.String("mode"),
// },
// },
// InputParameters: inputParameters,
// MaximumExecutionFrequency: jsii.String("maximumExecutionFrequency"),
// Scope: &ScopeProperty{
// ComplianceResourceId: jsii.String("complianceResourceId"),
// ComplianceResourceTypes: []*string{
// jsii.String("complianceResourceTypes"),
// },
// TagKey: jsii.String("tagKey"),
// TagValue: jsii.String("tagValue"),
// },
// }
//
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html
//
type CfnConfigRuleProps struct {
// Provides the rule owner ( `AWS` for managed rules, `CUSTOM_POLICY` for Custom Policy rules, and `CUSTOM_LAMBDA` for Custom Lambda rules), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-source
//
Source interface{} `field:"required" json:"source" yaml:"source"`
// Indicates whether an AWS resource or AWS Config rule is compliant and provides the number of contributors that affect the compliance.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-compliance
//
Compliance interface{} `field:"optional" json:"compliance" yaml:"compliance"`
// A name for the AWS Config rule.
//
// If you don't specify a name, AWS CloudFormation generates a unique physical ID and uses that ID for the rule name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) .
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-configrulename
//
ConfigRuleName *string `field:"optional" json:"configRuleName" yaml:"configRuleName"`
// The description that you provide for the AWS Config rule.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-description
//
Description *string `field:"optional" json:"description" yaml:"description"`
// The modes the AWS Config rule can be evaluated in.
//
// The valid values are distinct objects. By default, the value is Detective evaluation mode only.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-evaluationmodes
//
EvaluationModes interface{} `field:"optional" json:"evaluationModes" yaml:"evaluationModes"`
// A string, in JSON format, that is passed to the AWS Config rule Lambda function.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-inputparameters
//
InputParameters interface{} `field:"optional" json:"inputParameters" yaml:"inputParameters"`
// The maximum frequency with which AWS Config runs evaluations for a rule.
//
// You can specify a value for `MaximumExecutionFrequency` when:
//
// - You are using an AWS managed rule that is triggered at a periodic frequency.
// - Your custom rule is triggered when AWS Config delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html) .
//
// > By default, rules with a periodic trigger are evaluated every 24 hours. To change the frequency, specify a valid value for the `MaximumExecutionFrequency` parameter.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-maximumexecutionfrequency
//
MaximumExecutionFrequency *string `field:"optional" json:"maximumExecutionFrequency" yaml:"maximumExecutionFrequency"`
// Defines which resources can trigger an evaluation for the rule.
//
// The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes.
//
// > The scope can be empty.
// See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-config-configrule.html#cfn-config-configrule-scope
//
Scope interface{} `field:"optional" json:"scope" yaml:"scope"`
}