AWS Config
开发人员指南
AWS 服务或AWS文档中描述的功能,可能因地区/位置而异。点 击 Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

示例合规性变更通知

当 AWS Config 针对您的自定义规则或托管规则评估您的资源时,AWS Config 会发送一个通知来指明资源是否符合该规则。

下面是当 CloudTrail 跟踪资源符合 cloudtrail-enabled 托管规则时的示例通知。

Copy
{ "Type": "Notification", "MessageId": "11fd05dd-47e1-5523-bc01-55b988bb9478", "TopicArn": "arn:aws:sns:us-east-2:123456789012:config-topic-ohio", "Subject": "[AWS Config:us-east-2] AWS::::Account 123456789012 is COMPLIANT with cloudtrail-enabled in Accoun...", "Message": { "awsAccountId": "123456789012", "configRuleName": "cloudtrail-enabled", "configRuleARN": "arn:aws:config:us-east-2:123456789012:config-rule/config-rule-9rpvxc", "resourceType": "AWS::::Account", "resourceId": "123456789012", "awsRegion": "us-east-2", "newEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T19:48:40.619Z" }, "complianceType": "COMPLIANT", "resultRecordedTime": "2016-09-27T19:48:41.405Z", "configRuleInvokedTime": "2016-09-27T19:48:40.914Z", "annotation": null, "resultToken": null }, "oldEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T16:30:49.531Z" }, "complianceType": "NON_COMPLIANT", "resultRecordedTime": "2016-09-27T16:30:50.717Z", "configRuleInvokedTime": "2016-09-27T16:30:50.105Z", "annotation": null, "resultToken": null }, "notificationCreationTime": "2016-09-27T19:48:42.620Z", "messageType": "ComplianceChangeNotification", "recordVersion": "1.0" }, "Timestamp": "2016-09-27T19:48:42.749Z", "SignatureVersion": "1", "Signature": "XZ9FfLb2ywkW9yj0yBkNtIP5q7Cry6JtCEyUiHmG9gpOZi3seQ41udhtAqCZoiNiizAEi+6gcttHCRV1hNemzp/YmBmTfO6azYXt0FJDaEvd86k68VCS9aqRlBBjYlNo7ILi4Pqd5rE4BX2YBQSzcQyERGkUfTZ2BIFyAmb1Q/y4/6ez8rDyi545FDSlgcGEb4LKLNR6eDi4FbKtMGZHA7Nz8obqs1dHbgWYnp3c80mVLl7ohP4hilcxdywAgXrbsN32ekYr15gdHozx8YzyjfRSo3SjH0c5PGSXEAGNuC3mZrKJip+BIZ21ZtkcUtY5B3ImgRlUO7Yhn3L3c6rZxQ==", "SigningCertURL": "https://sns.us-east-2.amazonaws.com/SimpleNotificationService-b95095beb82e8f6a046b3aafc7f4149a.pem", "UnsubscribeURL": "https://sns.us-east-2.amazonaws.com/?Action=Unsubscribe&SubscriptionArn=arn:aws:sns:us-east-2:123456789012:config-topic-ohio:956fe658-0ce3-4fb3-b409-a45f22a3c3d4" }