config_rule

Manage AWS Config rule resources

Collection: community.aws

Full Name: community.aws.config_rule

Synopsis

Manage AWS Config rule resources

Parameters

Name	Type	Required	Default
access_key	str
aws_ca_bundle	path
aws_config	dict
debug_botocore_endpoint_logs	bool		`false`
description	str
endpoint_url	str
execution_frequency	str
input_parameters	str
name	str	yes
profile	str
region	str
scope	dict
secret_key	str
session_token	str
source	dict	yes
state	str		`present`
validate_certs	bool		`true`

Example

yaml

- name: Create Config Rule for AWS Config
  community.aws.config_rule:
    name: test_config_rule
    state: present
    description: 'This AWS Config rule checks for public write access on S3 buckets'
    scope:
        compliance_types:
            - 'AWS::S3::Bucket'
    source:
        owner: AWS
        identifier: 'S3_BUCKET_PUBLIC_WRITE_PROHIBITED'