# Actions


The following actions are supported:
+  [AssociateResourceTypes](API_AssociateResourceTypes.md) 
+  [BatchGetAggregateResourceConfig](API_BatchGetAggregateResourceConfig.md) 
+  [BatchGetResourceConfig](API_BatchGetResourceConfig.md) 
+  [DeleteAggregationAuthorization](API_DeleteAggregationAuthorization.md) 
+  [DeleteConfigRule](API_DeleteConfigRule.md) 
+  [DeleteConfigurationAggregator](API_DeleteConfigurationAggregator.md) 
+  [DeleteConfigurationRecorder](API_DeleteConfigurationRecorder.md) 
+  [DeleteConformancePack](API_DeleteConformancePack.md) 
+  [DeleteDeliveryChannel](API_DeleteDeliveryChannel.md) 
+  [DeleteEvaluationResults](API_DeleteEvaluationResults.md) 
+  [DeleteOrganizationConfigRule](API_DeleteOrganizationConfigRule.md) 
+  [DeleteOrganizationConformancePack](API_DeleteOrganizationConformancePack.md) 
+  [DeletePendingAggregationRequest](API_DeletePendingAggregationRequest.md) 
+  [DeleteRemediationConfiguration](API_DeleteRemediationConfiguration.md) 
+  [DeleteRemediationExceptions](API_DeleteRemediationExceptions.md) 
+  [DeleteResourceConfig](API_DeleteResourceConfig.md) 
+  [DeleteRetentionConfiguration](API_DeleteRetentionConfiguration.md) 
+  [DeleteServiceLinkedConfigurationRecorder](API_DeleteServiceLinkedConfigurationRecorder.md) 
+  [DeleteStoredQuery](API_DeleteStoredQuery.md) 
+  [DeliverConfigSnapshot](API_DeliverConfigSnapshot.md) 
+  [DescribeAggregateComplianceByConfigRules](API_DescribeAggregateComplianceByConfigRules.md) 
+  [DescribeAggregateComplianceByConformancePacks](API_DescribeAggregateComplianceByConformancePacks.md) 
+  [DescribeAggregationAuthorizations](API_DescribeAggregationAuthorizations.md) 
+  [DescribeComplianceByConfigRule](API_DescribeComplianceByConfigRule.md) 
+  [DescribeComplianceByResource](API_DescribeComplianceByResource.md) 
+  [DescribeConfigRuleEvaluationStatus](API_DescribeConfigRuleEvaluationStatus.md) 
+  [DescribeConfigRules](API_DescribeConfigRules.md) 
+  [DescribeConfigurationAggregators](API_DescribeConfigurationAggregators.md) 
+  [DescribeConfigurationAggregatorSourcesStatus](API_DescribeConfigurationAggregatorSourcesStatus.md) 
+  [DescribeConfigurationRecorders](API_DescribeConfigurationRecorders.md) 
+  [DescribeConfigurationRecorderStatus](API_DescribeConfigurationRecorderStatus.md) 
+  [DescribeConformancePackCompliance](API_DescribeConformancePackCompliance.md) 
+  [DescribeConformancePacks](API_DescribeConformancePacks.md) 
+  [DescribeConformancePackStatus](API_DescribeConformancePackStatus.md) 
+  [DescribeDeliveryChannels](API_DescribeDeliveryChannels.md) 
+  [DescribeDeliveryChannelStatus](API_DescribeDeliveryChannelStatus.md) 
+  [DescribeOrganizationConfigRules](API_DescribeOrganizationConfigRules.md) 
+  [DescribeOrganizationConfigRuleStatuses](API_DescribeOrganizationConfigRuleStatuses.md) 
+  [DescribeOrganizationConformancePacks](API_DescribeOrganizationConformancePacks.md) 
+  [DescribeOrganizationConformancePackStatuses](API_DescribeOrganizationConformancePackStatuses.md) 
+  [DescribePendingAggregationRequests](API_DescribePendingAggregationRequests.md) 
+  [DescribeRemediationConfigurations](API_DescribeRemediationConfigurations.md) 
+  [DescribeRemediationExceptions](API_DescribeRemediationExceptions.md) 
+  [DescribeRemediationExecutionStatus](API_DescribeRemediationExecutionStatus.md) 
+  [DescribeRetentionConfigurations](API_DescribeRetentionConfigurations.md) 
+  [DisassociateResourceTypes](API_DisassociateResourceTypes.md) 
+  [GetAggregateComplianceDetailsByConfigRule](API_GetAggregateComplianceDetailsByConfigRule.md) 
+  [GetAggregateConfigRuleComplianceSummary](API_GetAggregateConfigRuleComplianceSummary.md) 
+  [GetAggregateConformancePackComplianceSummary](API_GetAggregateConformancePackComplianceSummary.md) 
+  [GetAggregateDiscoveredResourceCounts](API_GetAggregateDiscoveredResourceCounts.md) 
+  [GetAggregateResourceConfig](API_GetAggregateResourceConfig.md) 
+  [GetComplianceDetailsByConfigRule](API_GetComplianceDetailsByConfigRule.md) 
+  [GetComplianceDetailsByResource](API_GetComplianceDetailsByResource.md) 
+  [GetComplianceSummaryByConfigRule](API_GetComplianceSummaryByConfigRule.md) 
+  [GetComplianceSummaryByResourceType](API_GetComplianceSummaryByResourceType.md) 
+  [GetConformancePackComplianceDetails](API_GetConformancePackComplianceDetails.md) 
+  [GetConformancePackComplianceSummary](API_GetConformancePackComplianceSummary.md) 
+  [GetCustomRulePolicy](API_GetCustomRulePolicy.md) 
+  [GetDiscoveredResourceCounts](API_GetDiscoveredResourceCounts.md) 
+  [GetOrganizationConfigRuleDetailedStatus](API_GetOrganizationConfigRuleDetailedStatus.md) 
+  [GetOrganizationConformancePackDetailedStatus](API_GetOrganizationConformancePackDetailedStatus.md) 
+  [GetOrganizationCustomRulePolicy](API_GetOrganizationCustomRulePolicy.md) 
+  [GetResourceConfigHistory](API_GetResourceConfigHistory.md) 
+  [GetResourceEvaluationSummary](API_GetResourceEvaluationSummary.md) 
+  [GetStoredQuery](API_GetStoredQuery.md) 
+  [ListAggregateDiscoveredResources](API_ListAggregateDiscoveredResources.md) 
+  [ListConfigurationRecorders](API_ListConfigurationRecorders.md) 
+  [ListConformancePackComplianceScores](API_ListConformancePackComplianceScores.md) 
+  [ListDiscoveredResources](API_ListDiscoveredResources.md) 
+  [ListResourceEvaluations](API_ListResourceEvaluations.md) 
+  [ListStoredQueries](API_ListStoredQueries.md) 
+  [ListTagsForResource](API_ListTagsForResource.md) 
+  [PutAggregationAuthorization](API_PutAggregationAuthorization.md) 
+  [PutConfigRule](API_PutConfigRule.md) 
+  [PutConfigurationAggregator](API_PutConfigurationAggregator.md) 
+  [PutConfigurationRecorder](API_PutConfigurationRecorder.md) 
+  [PutConformancePack](API_PutConformancePack.md) 
+  [PutDeliveryChannel](API_PutDeliveryChannel.md) 
+  [PutEvaluations](API_PutEvaluations.md) 
+  [PutExternalEvaluation](API_PutExternalEvaluation.md) 
+  [PutOrganizationConfigRule](API_PutOrganizationConfigRule.md) 
+  [PutOrganizationConformancePack](API_PutOrganizationConformancePack.md) 
+  [PutRemediationConfigurations](API_PutRemediationConfigurations.md) 
+  [PutRemediationExceptions](API_PutRemediationExceptions.md) 
+  [PutResourceConfig](API_PutResourceConfig.md) 
+  [PutRetentionConfiguration](API_PutRetentionConfiguration.md) 
+  [PutServiceLinkedConfigurationRecorder](API_PutServiceLinkedConfigurationRecorder.md) 
+  [PutStoredQuery](API_PutStoredQuery.md) 
+  [SelectAggregateResourceConfig](API_SelectAggregateResourceConfig.md) 
+  [SelectResourceConfig](API_SelectResourceConfig.md) 
+  [StartConfigRulesEvaluation](API_StartConfigRulesEvaluation.md) 
+  [StartConfigurationRecorder](API_StartConfigurationRecorder.md) 
+  [StartRemediationExecution](API_StartRemediationExecution.md) 
+  [StartResourceEvaluation](API_StartResourceEvaluation.md) 
+  [StopConfigurationRecorder](API_StopConfigurationRecorder.md) 
+  [TagResource](API_TagResource.md) 
+  [UntagResource](API_UntagResource.md) 

# AssociateResourceTypes


Adds all resource types specified in the `ResourceTypes` list to the [RecordingGroup](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingGroup.html) of specified configuration recorder and includes those resource types when recording.

For this operation, the specified configuration recorder must use a [RecordingStrategy](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingStrategy.html) that is either `INCLUSION_BY_RESOURCE_TYPES` or `EXCLUSION_BY_RESOURCE_TYPES`.

## Request Syntax


```
{
   "ConfigurationRecorderArn": "string",
   "ResourceTypes": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorderArn](#API_AssociateResourceTypes_RequestSyntax) **   <a name="config-AssociateResourceTypes-request-ConfigurationRecorderArn"></a>
The Amazon Resource Name (ARN) of the specified configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: Yes

 ** [ResourceTypes](#API_AssociateResourceTypes_RequestSyntax) **   <a name="config-AssociateResourceTypes-request-ResourceTypes"></a>
The list of resource types you want to add to the recording group of the specified configuration recorder.  
Type: Array of strings  
Valid Values: `AWS::EC2::CustomerGateway | AWS::EC2::EIP | AWS::EC2::Host | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInterface | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::Subnet | AWS::CloudTrail::Trail | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::EC2::RegisteredHAInstance | AWS::EC2::NatGateway | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::FlowLog | AWS::EC2::VPCPeeringConnection | AWS::Elasticsearch::Domain | AWS::IAM::Group | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::User | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::ACM::Certificate | AWS::RDS::DBInstance | AWS::RDS::DBSubnetGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBCluster | AWS::RDS::DBClusterSnapshot | AWS::RDS::EventSubscription | AWS::S3::Bucket | AWS::S3::AccountPublicAccessBlock | AWS::Redshift::Cluster | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::SSM::ManagedInstanceInventory | AWS::CloudWatch::Alarm | AWS::CloudFormation::Stack | AWS::ElasticLoadBalancing::LoadBalancer | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::DynamoDB::Table | AWS::CodeBuild::Project | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::Lambda::Function | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::RuleGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::WAFv2::WebACL | AWS::WAFv2::RuleGroup | AWS::WAFv2::IPSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::ManagedRuleSet | AWS::XRay::EncryptionConfig | AWS::SSM::AssociationCompliance | AWS::SSM::PatchCompliance | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::ApiGateway::Stage | AWS::ApiGateway::RestApi | AWS::ApiGatewayV2::Stage | AWS::ApiGatewayV2::Api | AWS::CodePipeline::Pipeline | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::Portfolio | AWS::SQS::Queue | AWS::KMS::Key | AWS::QLDB::Ledger | AWS::SecretsManager::Secret | AWS::SNS::Topic | AWS::SSM::FileData | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::ECR::Repository | AWS::ECS::Cluster | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EKS::Cluster | AWS::OpenSearch::Domain | AWS::EC2::TransitGateway | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::EC2::LaunchTemplate | AWS::ECR::PublicRepository | AWS::GuardDuty::Detector | AWS::EMR::SecurityConfiguration | AWS::SageMaker::CodeRepository | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::EventSubscription | AWS::MSK::Cluster | AWS::StepFunctions::Activity | AWS::WorkSpaces::Workspace | AWS::WorkSpaces::ConnectionAlias | AWS::SageMaker::Model | AWS::ElasticLoadBalancingV2::Listener | AWS::StepFunctions::StateMachine | AWS::Batch::JobQueue | AWS::Batch::ComputeEnvironment | AWS::AccessAnalyzer::Analyzer | AWS::Athena::WorkGroup | AWS::Athena::DataCatalog | AWS::Detective::Graph | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayRouteTable | AWS::DMS::Certificate | AWS::AppConfig::Application | AWS::AppSync::GraphQLApi | AWS::DataSync::LocationSMB | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationS3 | AWS::DataSync::LocationEFS | AWS::DataSync::Task | AWS::DataSync::LocationNFS | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EKS::FargateProfile | AWS::Glue::Job | AWS::GuardDuty::ThreatIntelSet | AWS::GuardDuty::IPSet | AWS::SageMaker::Workteam | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::ServiceDiscovery::Service | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::SES::ContactList | AWS::SES::ConfigurationSet | AWS::Route53::HostedZone | AWS::IoTEvents::Input | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::AlarmModel | AWS::ServiceDiscovery::HttpNamespace | AWS::Events::EventBus | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::InfrastructureConfiguration | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationHDFS | AWS::Glue::Classifier | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::ECR::RegistryPolicy | AWS::Backup::ReportPlan | AWS::Lightsail::Certificate | AWS::RUM::AppMonitor | AWS::Events::Endpoint | AWS::SES::ReceiptRuleSet | AWS::Events::Archive | AWS::Events::ApiDestination | AWS::Lightsail::Disk | AWS::FIS::ExperimentTemplate | AWS::DataSync::LocationFSxWindows | AWS::SES::ReceiptFilter | AWS::GuardDuty::Filter | AWS::SES::Template | AWS::AmazonMQ::Broker | AWS::AppConfig::Environment | AWS::AppConfig::ConfigurationProfile | AWS::Cloud9::EnvironmentEC2 | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Discoverer | AWS::FraudDetector::Label | AWS::FraudDetector::EntityType | AWS::FraudDetector::Variable | AWS::FraudDetector::Outcome | AWS::IoT::Authorizer | AWS::IoT::SecurityProfile | AWS::IoT::RoleAlias | AWS::IoT::Dimension | AWS::IoTAnalytics::Datastore | AWS::Lightsail::Bucket | AWS::Lightsail::StaticIp | AWS::MediaPackage::PackagingGroup | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::ResilienceHub::ResiliencyPolicy | AWS::Transfer::Workflow | AWS::EKS::IdentityProviderConfig | AWS::EKS::Addon | AWS::Glue::MLTransform | AWS::IoT::Policy | AWS::IoT::MitigationAction | AWS::IoTTwinMaker::Workspace | AWS::IoTTwinMaker::Entity | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Pipeline | AWS::IoTAnalytics::Channel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Project | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::AssetModel | AWS::IVS::Channel | AWS::IVS::RecordingConfiguration | AWS::IVS::PlaybackKeyPair | AWS::KinesisAnalyticsV2::Application | AWS::RDS::GlobalCluster | AWS::S3::MultiRegionAccessPoint | AWS::DeviceFarm::TestGridProject | AWS::Budgets::BudgetsAction | AWS::Lex::Bot | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::IoT::CustomMetric | AWS::Route53Resolver::FirewallDomainList | AWS::RoboMaker::RobotApplicationVersion | AWS::EC2::TrafficMirrorSession | AWS::IoTSiteWise::Gateway | AWS::Lex::BotAlias | AWS::LookoutMetrics::Alert | AWS::IoT::AccountAuditConfiguration | AWS::EC2::TrafficMirrorTarget | AWS::S3::StorageLens | AWS::IoT::ScheduledAudit | AWS::Events::Connection | AWS::EventSchemas::Schema | AWS::MediaPackage::PackagingConfiguration | AWS::KinesisVideo::SignalingChannel | AWS::AppStream::DirectoryConfig | AWS::LookoutVision::Project | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryReadiness::ResourceSet | AWS::RoboMaker::SimulationApplication | AWS::RoboMaker::RobotApplication | AWS::HealthLake::FHIRDatastore | AWS::Pinpoint::Segment | AWS::Pinpoint::ApplicationSettings | AWS::Events::Rule | AWS::EC2::DHCPOptions | AWS::EC2::NetworkInsightsPath | AWS::EC2::TrafficMirrorFilter | AWS::EC2::IPAM | AWS::IoTTwinMaker::Scene | AWS::NetworkManager::TransitGatewayRegistration | AWS::CustomerProfiles::Domain | AWS::AutoScaling::WarmPool | AWS::Connect::PhoneNumber | AWS::AppConfig::DeploymentStrategy | AWS::AppFlow::Flow | AWS::AuditManager::Assessment | AWS::CloudWatch::MetricStream | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::EC2::EC2Fleet | AWS::EC2::SubnetRouteTableAssociation | AWS::ECR::PullThroughCacheRule | AWS::GroundStation::Config | AWS::ImageBuilder::ImagePipeline | AWS::IoT::FleetMetric | AWS::IoTWireless::ServiceProfile | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::Site | AWS::Panorama::Package | AWS::Pinpoint::App | AWS::Redshift::ScheduledAction | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::SageMaker::AppImageConfig | AWS::SageMaker::Image | AWS::ECS::TaskSet | AWS::Cassandra::Keyspace | AWS::Signer::SigningProfile | AWS::Amplify::App | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualService | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::CodeArtifact::Repository | AWS::EC2::PrefixList | AWS::EC2::SpotFleet | AWS::Evidently::Project | AWS::Forecast::Dataset | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::Pinpoint::Campaign | AWS::Pinpoint::InAppTemplate | AWS::SageMaker::Domain | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::KinesisFirehose::DeliveryStream | AWS::Amplify::Branch | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::Route | AWS::Athena::PreparedStatement | AWS::EC2::IPAMScope | AWS::Evidently::Launch | AWS::Forecast::DatasetGroup | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::MissionProfile | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaTailor::PlaybackConfiguration | AWS::MSK::Configuration | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::ResilienceHub::App | AWS::ACMPCA::CertificateAuthority | AWS::AppConfig::HostedConfigurationVersion | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualRouter | AWS::AppRunner::Service | AWS::CustomerProfiles::ObjectType | AWS::DMS::Endpoint | AWS::EC2::CapacityReservation | AWS::EC2::ClientVpnEndpoint | AWS::Kendra::Index | AWS::KinesisVideo::Stream | AWS::Logs::Destination | AWS::Pinpoint::EmailChannel | AWS::S3::AccessPoint | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::LinkAssociation | AWS::IoTWireless::MulticastGroup | AWS::Personalize::DatasetGroup | AWS::IoTTwinMaker::ComponentType | AWS::CodeBuild::ReportGroup | AWS::SageMaker::FeatureGroup | AWS::MSK::BatchScramSecret | AWS::AppStream::Stack | AWS::IoT::JobTemplate | AWS::IoTWireless::FuotaTask | AWS::IoT::ProvisioningTemplate | AWS::InspectorV2::Filter | AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation | AWS::ServiceDiscovery::Instance | AWS::Transfer::Certificate | AWS::MediaConnect::FlowSource | AWS::APS::RuleGroupsNamespace | AWS::CodeGuruProfiler::ProfilingGroup | AWS::Route53Resolver::ResolverQueryLoggingConfig | AWS::Batch::SchedulingPolicy | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::Connect::Instance | AWS::Connect::QuickConnect | AWS::EC2::CarrierGateway | AWS::EC2::IPAMPool | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::ECS::CapacityProvider | AWS::IAM::InstanceProfile | AWS::IoT::CACertificate | AWS::IoTTwinMaker::SyncJob | AWS::KafkaConnect::Connector | AWS::Lambda::CodeSigningConfig | AWS::NetworkManager::ConnectPeer | AWS::ResourceExplorer2::Index | AWS::AppStream::Fleet | AWS::Cognito::UserPool | AWS::Cognito::UserPoolClient | AWS::Cognito::UserPoolGroup | AWS::EC2::NetworkInsightsAccessScope | AWS::EC2::NetworkInsightsAnalysis | AWS::Grafana::Workspace | AWS::GroundStation::DataflowEndpointGroup | AWS::ImageBuilder::ImageRecipe | AWS::KMS::Alias | AWS::M2::Environment | AWS::QuickSight::DataSource | AWS::QuickSight::Template | AWS::QuickSight::Theme | AWS::RDS::OptionGroup | AWS::Redshift::EndpointAccess | AWS::Route53Resolver::FirewallRuleGroup | AWS::SSM::Document`   
Required: Yes

## Response Syntax


```
{
   "ConfigurationRecorder": { 
      "arn": "string",
      "name": "string",
      "recordingGroup": { 
         "allSupported": boolean,
         "exclusionByResourceTypes": { 
            "resourceTypes": [ "string" ]
         },
         "includeGlobalResourceTypes": boolean,
         "recordingStrategy": { 
            "useOnly": "string"
         },
         "resourceTypes": [ "string" ]
      },
      "recordingMode": { 
         "recordingFrequency": "string",
         "recordingModeOverrides": [ 
            { 
               "description": "string",
               "recordingFrequency": "string",
               "resourceTypes": [ "string" ]
            }
         ]
      },
      "recordingScope": "string",
      "roleARN": "string",
      "servicePrincipal": "string"
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationRecorder](#API_AssociateResourceTypes_ResponseSyntax) **   <a name="config-AssociateResourceTypes-response-ConfigurationRecorder"></a>
Records configuration changes to the resource types in scope.  
For more information about the configuration recorder, see [https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html](https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html) in the * Amazon Config Developer Guide*.  
Type: [ConfigurationRecorder](API_ConfigurationRecorder.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ConflictException **   
For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.  
For [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html), you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.  
For [DeleteDeliveryChannel](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteDeliveryChannel.html), you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html) operation to stop the customer managed configuration recorder.  
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.
+ For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/AssociateResourceTypes) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/AssociateResourceTypes) 

# BatchGetAggregateResourceConfig


Returns the current configuration items for resources that are present in your Amazon Config aggregator. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty `unprocessedResourceIdentifiers` list. 

**Note**  
The API does not return results for deleted resources.
 The API does not return tags and relationships.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "ResourceIdentifiers": [ 
      { 
         "ResourceId": "string",
         "ResourceName": "string",
         "ResourceType": "string",
         "SourceAccountId": "string",
         "SourceRegion": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_BatchGetAggregateResourceConfig_RequestSyntax) **   <a name="config-BatchGetAggregateResourceConfig-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [ResourceIdentifiers](#API_BatchGetAggregateResourceConfig_RequestSyntax) **   <a name="config-BatchGetAggregateResourceConfig-request-ResourceIdentifiers"></a>
A list of aggregate ResourceIdentifiers objects.   
Type: Array of [AggregateResourceIdentifier](API_AggregateResourceIdentifier.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: Yes

## Response Syntax


```
{
   "BaseConfigurationItems": [ 
      { 
         "accountId": "string",
         "arn": "string",
         "availabilityZone": "string",
         "awsRegion": "string",
         "configuration": "string",
         "configurationItemCaptureTime": number,
         "configurationItemDeliveryTime": number,
         "configurationItemStatus": "string",
         "configurationStateId": "string",
         "recordingFrequency": "string",
         "resourceCreationTime": number,
         "resourceId": "string",
         "resourceName": "string",
         "resourceType": "string",
         "supplementaryConfiguration": { 
            "string" : "string" 
         },
         "version": "string"
      }
   ],
   "UnprocessedResourceIdentifiers": [ 
      { 
         "ResourceId": "string",
         "ResourceName": "string",
         "ResourceType": "string",
         "SourceAccountId": "string",
         "SourceRegion": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [BaseConfigurationItems](#API_BatchGetAggregateResourceConfig_ResponseSyntax) **   <a name="config-BatchGetAggregateResourceConfig-response-BaseConfigurationItems"></a>
A list that contains the current configuration of one or more resources.  
Type: Array of [BaseConfigurationItem](API_BaseConfigurationItem.md) objects

 ** [UnprocessedResourceIdentifiers](#API_BatchGetAggregateResourceConfig_ResponseSyntax) **   <a name="config-BatchGetAggregateResourceConfig-response-UnprocessedResourceIdentifiers"></a>
A list of resource identifiers that were not processed with current scope. The list is empty if all the resources are processed.  
Type: Array of [AggregateResourceIdentifier](API_AggregateResourceIdentifier.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/BatchGetAggregateResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/BatchGetAggregateResourceConfig) 

# BatchGetResourceConfig


Returns the `BaseConfigurationItem` for one or more requested resources. The operation also returns a list of resources that are not processed in the current request. If there are no unprocessed resources, the operation returns an empty unprocessedResourceKeys list. 

**Note**  
The API does not return results for deleted resources.
 The API does not return any tags for the requested resources. This information is filtered out of the supplementaryConfiguration section of the API response.

## Request Syntax


```
{
   "resourceKeys": [ 
      { 
         "resourceId": "string",
         "resourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [resourceKeys](#API_BatchGetResourceConfig_RequestSyntax) **   <a name="config-BatchGetResourceConfig-request-resourceKeys"></a>
A list of resource keys to be processed with the current request. Each element in the list consists of the resource type and resource ID.  
Type: Array of [ResourceKey](API_ResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: Yes

## Response Syntax


```
{
   "baseConfigurationItems": [ 
      { 
         "accountId": "string",
         "arn": "string",
         "availabilityZone": "string",
         "awsRegion": "string",
         "configuration": "string",
         "configurationItemCaptureTime": number,
         "configurationItemDeliveryTime": number,
         "configurationItemStatus": "string",
         "configurationStateId": "string",
         "recordingFrequency": "string",
         "resourceCreationTime": number,
         "resourceId": "string",
         "resourceName": "string",
         "resourceType": "string",
         "supplementaryConfiguration": { 
            "string" : "string" 
         },
         "version": "string"
      }
   ],
   "unprocessedResourceKeys": [ 
      { 
         "resourceId": "string",
         "resourceType": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [baseConfigurationItems](#API_BatchGetResourceConfig_ResponseSyntax) **   <a name="config-BatchGetResourceConfig-response-baseConfigurationItems"></a>
A list that contains the current configuration of one or more resources.  
Type: Array of [BaseConfigurationItem](API_BaseConfigurationItem.md) objects

 ** [unprocessedResourceKeys](#API_BatchGetResourceConfig_ResponseSyntax) **   <a name="config-BatchGetResourceConfig-response-unprocessedResourceKeys"></a>
A list of resource keys that were not processed with the current response. The unprocessesResourceKeys value is in the same form as ResourceKeys, so the value can be directly provided to a subsequent BatchGetResourceConfig operation. If there are no unprocessed resource keys, the response contains an empty unprocessedResourceKeys list.   
Type: Array of [ResourceKey](API_ResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/BatchGetResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/BatchGetResourceConfig) 

# DeleteAggregationAuthorization


Deletes the authorization granted to the specified configuration aggregator account in a specified region.

## Request Syntax


```
{
   "AuthorizedAccountId": "string",
   "AuthorizedAwsRegion": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [AuthorizedAccountId](#API_DeleteAggregationAuthorization_RequestSyntax) **   <a name="config-DeleteAggregationAuthorization-request-AuthorizedAccountId"></a>
The 12-digit account ID of the account authorized to aggregate data.  
Type: String  
Pattern: `\d{12}`   
Required: Yes

 ** [AuthorizedAwsRegion](#API_DeleteAggregationAuthorization_RequestSyntax) **   <a name="config-DeleteAggregationAuthorization-request-AuthorizedAwsRegion"></a>
The region authorized to collect aggregated data.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteAggregationAuthorization) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteAggregationAuthorization) 

# DeleteConfigRule


Deletes the specified Amazon Config rule and all of its evaluation results.

 Amazon Config sets the state of a rule to `DELETING` until the deletion is complete. You cannot update a rule while it is in this state. If you make a `PutConfigRule` or `DeleteConfigRule` request for the rule, you will receive a `ResourceInUseException`.

You can check the state of a rule by using the `DescribeConfigRules` request.

**Note**  
 **Recommendation: Consider excluding the `AWS::Config::ResourceCompliance` resource type from recording before deleting rules**   
Deleting rules creates configuration items (CIs) for `AWS::Config::ResourceCompliance` that can affect your costs for the configuration recorder. If you are deleting rules which evaluate a large number of resource types, this can lead to a spike in the number of CIs recorded.  
To avoid the associated costs, you can opt to disable recording for the `AWS::Config::ResourceCompliance` resource type before deleting rules, and re-enable recording after the rules have been deleted.  
However, since deleting rules is an asynchronous process, it might take an hour or more to complete. During the time when recording is disabled for `AWS::Config::ResourceCompliance`, rule evaluations will not be recorded in the associated resource’s history.

## Request Syntax


```
{
   "ConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DeleteConfigRule_RequestSyntax) **   <a name="config-DeleteConfigRule-request-ConfigRuleName"></a>
The name of the Amazon Config rule that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteConfigRule) 

# DeleteConfigurationAggregator


Deletes the specified configuration aggregator and the aggregated data associated with the aggregator.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_DeleteConfigurationAggregator_RequestSyntax) **   <a name="config-DeleteConfigurationAggregator-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteConfigurationAggregator) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteConfigurationAggregator) 

# DeleteConfigurationRecorder


Deletes the customer managed configuration recorder.

This operation does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the [GetResourceConfigHistory](https://docs.amazonaws.cn/config/latest/APIReference/API_GetResourceConfigHistory.html) operation, but you will not be able to access this information in the Amazon Config console until you have created a new customer managed configuration recorder.

## Request Syntax


```
{
   "ConfigurationRecorderName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorderName](#API_DeleteConfigurationRecorder_RequestSyntax) **   <a name="config-DeleteConfigurationRecorder-request-ConfigurationRecorderName"></a>
The name of the customer managed configuration recorder that you want to delete. You can retrieve the name of your configuration recorders by using the [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) operation.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** UnmodifiableEntityException **   
The requested operation is not valid.  
For [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html), you will see this exception because you cannot use this operation to create a service-linked configuration recorder. Use the [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html) operation to create a service-linked configuration recorder.  
For [DeleteConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteConfigurationRecorder.html), you will see this exception because you cannot use this operation to delete a service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
For [StartConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StartConfigurationRecorder.html) and [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html), you will see this exception because these operations do not affect service-linked configuration recorders. Service-linked configuration recorders are always recording. To stop recording, you must delete the service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteConfigurationRecorder) 

# DeleteConformancePack


Deletes the specified conformance pack and all the Amazon Config rules, remediation actions, and all evaluation results within that conformance pack.

 Amazon Config sets the conformance pack to `DELETE_IN_PROGRESS` until the deletion is complete. You cannot update a conformance pack while it is in this state.

**Note**  
 **Recommendation: Consider excluding the `AWS::Config::ResourceCompliance` resource type from recording before deleting rules**   
Deleting rules creates configuration items (CIs) for `AWS::Config::ResourceCompliance` that can affect your costs for the configuration recorder. If you are deleting rules which evaluate a large number of resource types, this can lead to a spike in the number of CIs recorded.  
To avoid the associated costs, you can opt to disable recording for the `AWS::Config::ResourceCompliance` resource type before deleting rules, and re-enable recording after the rules have been deleted.  
However, since deleting rules is an asynchronous process, it might take an hour or more to complete. During the time when recording is disabled for `AWS::Config::ResourceCompliance`, rule evaluations will not be recorded in the associated resource’s history.

## Request Syntax


```
{
   "ConformancePackName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackName](#API_DeleteConformancePack_RequestSyntax) **   <a name="config-DeleteConformancePack-request-ConformancePackName"></a>
Name of the conformance pack you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConformancePackException **   
You specified one or more conformance packs that do not exist.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteConformancePack) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteConformancePack) 

# DeleteDeliveryChannel


Deletes the delivery channel.

Before you can delete the delivery channel, you must stop the customer managed configuration recorder. You can use the [StopConfigurationRecorder](API_StopConfigurationRecorder.md) operation to stop the customer managed configuration recorder.

## Request Syntax


```
{
   "DeliveryChannelName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [DeliveryChannelName](#API_DeleteDeliveryChannel_RequestSyntax) **   <a name="config-DeleteDeliveryChannel-request-DeliveryChannelName"></a>
The name of the delivery channel that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** LastDeliveryChannelDeleteFailedException **   
You cannot delete the delivery channel you specified because the customer managed configuration recorder is running.  
HTTP Status Code: 400

 ** NoSuchDeliveryChannelException **   
You have specified a delivery channel that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteDeliveryChannel) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteDeliveryChannel) 

# DeleteEvaluationResults


Deletes the evaluation results for the specified Amazon Config rule. You can specify one Amazon Config rule per request. After you delete the evaluation results, you can call the [StartConfigRulesEvaluation](API_StartConfigRulesEvaluation.md) API to start evaluating your Amazon resources against the rule.

## Request Syntax


```
{
   "ConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DeleteEvaluationResults_RequestSyntax) **   <a name="config-DeleteEvaluationResults-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want to delete the evaluation results.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteEvaluationResults) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteEvaluationResults) 

# DeleteOrganizationConfigRule


Deletes the specified organization Amazon Config rule and all of its evaluation results from all member accounts in that organization. 

Only a management account and a delegated administrator account can delete an organization Amazon Config rule. When calling this API with a delegated administrator, you must ensure Amazon Organizations `ListDelegatedAdministrator` permissions are added.

 Amazon Config sets the state of a rule to DELETE\$1IN\$1PROGRESS until the deletion is complete. You cannot update a rule while it is in this state.

**Note**  
 **Recommendation: Consider excluding the `AWS::Config::ResourceCompliance` resource type from recording before deleting rules**   
Deleting rules creates configuration items (CIs) for `AWS::Config::ResourceCompliance` that can affect your costs for the configuration recorder. If you are deleting rules which evaluate a large number of resource types, this can lead to a spike in the number of CIs recorded.  
To avoid the associated costs, you can opt to disable recording for the `AWS::Config::ResourceCompliance` resource type before deleting rules, and re-enable recording after the rules have been deleted.  
However, since deleting rules is an asynchronous process, it might take an hour or more to complete. During the time when recording is disabled for `AWS::Config::ResourceCompliance`, rule evaluations will not be recorded in the associated resource’s history.

## Request Syntax


```
{
   "OrganizationConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [OrganizationConfigRuleName](#API_DeleteOrganizationConfigRule_RequestSyntax) **   <a name="config-DeleteOrganizationConfigRule-request-OrganizationConfigRuleName"></a>
The name of organization Amazon Config rule that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `[A-Za-z0-9-_]+`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchOrganizationConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an organization Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteOrganizationConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteOrganizationConfigRule) 

# DeleteOrganizationConformancePack


Deletes the specified organization conformance pack and all of the Amazon Config rules and remediation actions from all member accounts in that organization. 

 Only a management account or a delegated administrator account can delete an organization conformance pack. When calling this API with a delegated administrator, you must ensure Amazon Organizations `ListDelegatedAdministrator` permissions are added.

 Amazon Config sets the state of a conformance pack to DELETE\$1IN\$1PROGRESS until the deletion is complete. You cannot update a conformance pack while it is in this state. 

**Note**  
 **Recommendation: Consider excluding the `AWS::Config::ResourceCompliance` resource type from recording before deleting rules**   
Deleting rules creates configuration items (CIs) for `AWS::Config::ResourceCompliance` that can affect your costs for the configuration recorder. If you are deleting rules which evaluate a large number of resource types, this can lead to a spike in the number of CIs recorded.  
To avoid the associated costs, you can opt to disable recording for the `AWS::Config::ResourceCompliance` resource type before deleting rules, and re-enable recording after the rules have been deleted.  
However, since deleting rules is an asynchronous process, it might take an hour or more to complete. During the time when recording is disabled for `AWS::Config::ResourceCompliance`, rule evaluations will not be recorded in the associated resource’s history.

## Request Syntax


```
{
   "OrganizationConformancePackName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [OrganizationConformancePackName](#API_DeleteOrganizationConformancePack_RequestSyntax) **   <a name="config-DeleteOrganizationConformancePack-request-OrganizationConformancePackName"></a>
The name of organization conformance pack that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchOrganizationConformancePackException **   
 Amazon Config organization conformance pack that you passed in the filter does not exist.  
For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteOrganizationConformancePack) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteOrganizationConformancePack) 

# DeletePendingAggregationRequest


Deletes pending authorization requests for a specified aggregator account in a specified region.

## Request Syntax


```
{
   "RequesterAccountId": "string",
   "RequesterAwsRegion": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [RequesterAccountId](#API_DeletePendingAggregationRequest_RequestSyntax) **   <a name="config-DeletePendingAggregationRequest-request-RequesterAccountId"></a>
The 12-digit account ID of the account requesting to aggregate data.  
Type: String  
Pattern: `\d{12}`   
Required: Yes

 ** [RequesterAwsRegion](#API_DeletePendingAggregationRequest_RequestSyntax) **   <a name="config-DeletePendingAggregationRequest-request-RequesterAwsRegion"></a>
The region requesting to aggregate data.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeletePendingAggregationRequest) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeletePendingAggregationRequest) 

# DeleteRemediationConfiguration


Deletes the remediation configuration.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "ResourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DeleteRemediationConfiguration_RequestSyntax) **   <a name="config-DeleteRemediationConfiguration-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want to delete remediation configuration.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ResourceType](#API_DeleteRemediationConfiguration_RequestSyntax) **   <a name="config-DeleteRemediationConfiguration-request-ResourceType"></a>
The type of a resource.  
Type: String  
Required: No

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchRemediationConfigurationException **   
You specified an Amazon Config rule without a remediation configuration.  
HTTP Status Code: 400

 ** RemediationInProgressException **   
Remediation action is in progress. You can either cancel execution in Amazon Systems Manager or wait and try again later.   
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteRemediationConfiguration) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteRemediationConfiguration) 

# DeleteRemediationExceptions


Deletes one or more remediation exceptions mentioned in the resource keys.

**Note**  
 Amazon Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "ResourceKeys": [ 
      { 
         "ResourceId": "string",
         "ResourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DeleteRemediationExceptions_RequestSyntax) **   <a name="config-DeleteRemediationExceptions-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want to delete remediation exception configuration.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ResourceKeys](#API_DeleteRemediationExceptions_RequestSyntax) **   <a name="config-DeleteRemediationExceptions-request-ResourceKeys"></a>
An exception list of resource exception keys to be processed with the current request. Amazon Config adds exception for each resource key. For example, Amazon Config adds 3 exceptions for 3 resource keys.   
Type: Array of [RemediationExceptionResourceKey](API_RemediationExceptionResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: Yes

## Response Syntax


```
{
   "FailedBatches": [ 
      { 
         "FailedItems": [ 
            { 
               "ResourceId": "string",
               "ResourceType": "string"
            }
         ],
         "FailureMessage": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [FailedBatches](#API_DeleteRemediationExceptions_ResponseSyntax) **   <a name="config-DeleteRemediationExceptions-response-FailedBatches"></a>
Returns a list of failed delete remediation exceptions batch objects. Each object in the batch consists of a list of failed items and failure messages.  
Type: Array of [FailedDeleteRemediationExceptionsBatch](API_FailedDeleteRemediationExceptionsBatch.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchRemediationExceptionException **   
You tried to delete a remediation exception that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteRemediationExceptions) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteRemediationExceptions) 

# DeleteResourceConfig


Records the configuration state for a custom resource that has been deleted. This API records a new ConfigurationItem with a ResourceDeleted status. You can retrieve the ConfigurationItems recorded for this resource in your Amazon Config History. 

## Request Syntax


```
{
   "ResourceId": "string",
   "ResourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ResourceId](#API_DeleteResourceConfig_RequestSyntax) **   <a name="config-DeleteResourceConfig-request-ResourceId"></a>
Unique identifier of the resource.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: Yes

 ** [ResourceType](#API_DeleteResourceConfig_RequestSyntax) **   <a name="config-DeleteResourceConfig-request-ResourceType"></a>
The type of the resource.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 196.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoRunningConfigurationRecorderException **   
There is no configuration recorder running.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteResourceConfig) 

# DeleteRetentionConfiguration


Deletes the retention configuration.

## Request Syntax


```
{
   "RetentionConfigurationName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [RetentionConfigurationName](#API_DeleteRetentionConfiguration_RequestSyntax) **   <a name="config-DeleteRetentionConfiguration-request-RetentionConfigurationName"></a>
The name of the retention configuration to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchRetentionConfigurationException **   
You have specified a retention configuration that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteRetentionConfiguration) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteRetentionConfiguration) 

# DeleteServiceLinkedConfigurationRecorder


Deletes an existing service-linked configuration recorder.

This operation does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the [GetResourceConfigHistory](https://docs.amazonaws.cn/config/latest/APIReference/API_GetResourceConfigHistory.html) operation, but you will not be able to access this information in the Amazon Config console until you have created a new service-linked configuration recorder for the same service.

**Note**  
 **The recording scope determines if you receive configuration items**   
The recording scope is set by the service that is linked to the configuration recorder and determines whether you receive configuration items (CIs) in the delivery channel. If the recording scope is internal, you will not receive CIs in the delivery channel.

## Request Syntax


```
{
   "ServicePrincipal": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ServicePrincipal](#API_DeleteServiceLinkedConfigurationRecorder_RequestSyntax) **   <a name="config-DeleteServiceLinkedConfigurationRecorder-request-ServicePrincipal"></a>
The service principal of the Amazon Web Services service for the service-linked configuration recorder that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[\w+=,.@-]+`   
Required: Yes

## Response Syntax


```
{
   "Arn": "string",
   "Name": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [Arn](#API_DeleteServiceLinkedConfigurationRecorder_ResponseSyntax) **   <a name="config-DeleteServiceLinkedConfigurationRecorder-response-Arn"></a>
The Amazon Resource Name (ARN) of the specified configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.

 ** [Name](#API_DeleteServiceLinkedConfigurationRecorder_ResponseSyntax) **   <a name="config-DeleteServiceLinkedConfigurationRecorder-response-Name"></a>
The name of the specified configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ConflictException **   
For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.  
For [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html), you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.  
For [DeleteDeliveryChannel](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteDeliveryChannel.html), you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html) operation to stop the customer managed configuration recorder.  
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.
+ For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteServiceLinkedConfigurationRecorder) 

# DeleteStoredQuery


Deletes the stored query for a single Amazon Web Services account and a single Amazon Web Services Region.

## Request Syntax


```
{
   "QueryName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [QueryName](#API_DeleteStoredQuery_RequestSyntax) **   <a name="config-DeleteStoredQuery-request-QueryName"></a>
The name of the query that you want to delete.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `^[a-zA-Z0-9-_]+$`   
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeleteStoredQuery) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeleteStoredQuery) 

# DeliverConfigSnapshot


Schedules delivery of a configuration snapshot to the Amazon S3 bucket in the specified delivery channel. After the delivery has started, Amazon Config sends the following notifications using an Amazon SNS topic that you have specified.
+ Notification of the start of the delivery.
+ Notification of the completion of the delivery, if the delivery was successfully completed.
+ Notification of delivery failure, if the delivery failed.

## Request Syntax


```
{
   "deliveryChannelName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [deliveryChannelName](#API_DeliverConfigSnapshot_RequestSyntax) **   <a name="config-DeliverConfigSnapshot-request-deliveryChannelName"></a>
The name of the delivery channel through which the snapshot is delivered.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: Yes

## Response Syntax


```
{
   "configSnapshotId": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [configSnapshotId](#API_DeliverConfigSnapshot_ResponseSyntax) **   <a name="config-DeliverConfigSnapshot-response-configSnapshotId"></a>
The ID of the snapshot that is being created.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** NoRunningConfigurationRecorderException **   
There is no configuration recorder running.  
HTTP Status Code: 400

 ** NoSuchDeliveryChannelException **   
You have specified a delivery channel that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DeliverConfigSnapshot) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DeliverConfigSnapshot) 

# DescribeAggregateComplianceByConfigRules


Returns a list of compliant and noncompliant rules with the number of resources for compliant and noncompliant rules. Does not display rules that do not have compliance results. 

**Note**  
The results can return an empty result page, but if you have a `nextToken`, the results are displayed on the next page.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "AwsRegion": "string",
      "ComplianceType": "string",
      "ConfigRuleName": "string"
   },
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_DescribeAggregateComplianceByConfigRules_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_DescribeAggregateComplianceByConfigRules_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-request-Filters"></a>
Filters the results by ConfigRuleComplianceFilters object.   
Type: [ConfigRuleComplianceFilters](API_ConfigRuleComplianceFilters.md) object  
Required: No

 ** [Limit](#API_DescribeAggregateComplianceByConfigRules_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 1000.  
Required: No

 ** [NextToken](#API_DescribeAggregateComplianceByConfigRules_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregateComplianceByConfigRules": [ 
      { 
         "AccountId": "string",
         "AwsRegion": "string",
         "Compliance": { 
            "ComplianceContributorCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            },
            "ComplianceType": "string"
         },
         "ConfigRuleName": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregateComplianceByConfigRules](#API_DescribeAggregateComplianceByConfigRules_ResponseSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-response-AggregateComplianceByConfigRules"></a>
Returns a list of AggregateComplianceByConfigRule object.  
Type: Array of [AggregateComplianceByConfigRule](API_AggregateComplianceByConfigRule.md) objects

 ** [NextToken](#API_DescribeAggregateComplianceByConfigRules_ResponseSyntax) **   <a name="config-DescribeAggregateComplianceByConfigRules-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeAggregateComplianceByConfigRules) 

# DescribeAggregateComplianceByConformancePacks


Returns a list of the existing and deleted conformance packs and their associated compliance status with the count of compliant and noncompliant Amazon Config rules within each conformance pack. Also returns the total rule count which includes compliant rules, noncompliant rules, and rules that cannot be evaluated due to insufficient data.

**Note**  
The results can return an empty result page, but if you have a `nextToken`, the results are displayed on the next page.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "AwsRegion": "string",
      "ComplianceType": "string",
      "ConformancePackName": "string"
   },
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_DescribeAggregateComplianceByConformancePacks_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_DescribeAggregateComplianceByConformancePacks_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-request-Filters"></a>
Filters the result by `AggregateConformancePackComplianceFilters` object.  
Type: [AggregateConformancePackComplianceFilters](API_AggregateConformancePackComplianceFilters.md) object  
Required: No

 ** [Limit](#API_DescribeAggregateComplianceByConformancePacks_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-request-Limit"></a>
The maximum number of conformance packs compliance details returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeAggregateComplianceByConformancePacks_RequestSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregateComplianceByConformancePacks": [ 
      { 
         "AccountId": "string",
         "AwsRegion": "string",
         "Compliance": { 
            "ComplianceType": "string",
            "CompliantRuleCount": number,
            "NonCompliantRuleCount": number,
            "TotalRuleCount": number
         },
         "ConformancePackName": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregateComplianceByConformancePacks](#API_DescribeAggregateComplianceByConformancePacks_ResponseSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-response-AggregateComplianceByConformancePacks"></a>
Returns the `AggregateComplianceByConformancePack` object.  
Type: Array of [AggregateComplianceByConformancePack](API_AggregateComplianceByConformancePack.md) objects

 ** [NextToken](#API_DescribeAggregateComplianceByConformancePacks_ResponseSyntax) **   <a name="config-DescribeAggregateComplianceByConformancePacks-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeAggregateComplianceByConformancePacks) 

# DescribeAggregationAuthorizations


Returns a list of authorizations granted to various aggregator accounts and regions.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribeAggregationAuthorizations_RequestSyntax) **   <a name="config-DescribeAggregationAuthorizations-request-Limit"></a>
The maximum number of AggregationAuthorizations returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeAggregationAuthorizations_RequestSyntax) **   <a name="config-DescribeAggregationAuthorizations-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregationAuthorizations": [ 
      { 
         "AggregationAuthorizationArn": "string",
         "AuthorizedAccountId": "string",
         "AuthorizedAwsRegion": "string",
         "CreationTime": number
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregationAuthorizations](#API_DescribeAggregationAuthorizations_ResponseSyntax) **   <a name="config-DescribeAggregationAuthorizations-response-AggregationAuthorizations"></a>
Returns a list of authorizations granted to various aggregator accounts and regions.  
Type: Array of [AggregationAuthorization](API_AggregationAuthorization.md) objects

 ** [NextToken](#API_DescribeAggregationAuthorizations_ResponseSyntax) **   <a name="config-DescribeAggregationAuthorizations-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeAggregationAuthorizations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeAggregationAuthorizations) 

# DescribeComplianceByConfigRule


Indicates whether the specified Amazon Config rules are compliant. If a rule is noncompliant, this operation returns the number of Amazon resources that do not comply with the rule.

A rule is compliant if all of the evaluated resources comply with it. It is noncompliant if any of these resources do not comply.

If Amazon Config has no current evaluation results for the rule, it returns `INSUFFICIENT_DATA`. This result might indicate one of the following conditions:
+  Amazon Config has never invoked an evaluation for the rule. To check whether it has, use the `DescribeConfigRuleEvaluationStatus` action to get the `LastSuccessfulInvocationTime` and `LastFailedInvocationTime`.
+ The rule's Amazon Lambda function is failing to send evaluation results to Amazon Config. Verify that the role you assigned to your configuration recorder includes the `config:PutEvaluations` permission. If the rule is a custom rule, verify that the Amazon Lambda execution role includes the `config:PutEvaluations` permission.
+ The rule's Amazon Lambda function has returned `NOT_APPLICABLE` for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.

## Request Syntax


```
{
   "ComplianceTypes": [ "string" ],
   "ConfigRuleNames": [ "string" ],
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ComplianceTypes](#API_DescribeComplianceByConfigRule_RequestSyntax) **   <a name="config-DescribeComplianceByConfigRule-request-ComplianceTypes"></a>
Filters the results by compliance.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 3 items.  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA`   
Required: No

 ** [ConfigRuleNames](#API_DescribeComplianceByConfigRule_RequestSyntax) **   <a name="config-DescribeComplianceByConfigRule-request-ConfigRuleNames"></a>
Specify one or more Amazon Config rule names to filter the results by rule.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: No

 ** [NextToken](#API_DescribeComplianceByConfigRule_RequestSyntax) **   <a name="config-DescribeComplianceByConfigRule-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ComplianceByConfigRules": [ 
      { 
         "Compliance": { 
            "ComplianceContributorCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            },
            "ComplianceType": "string"
         },
         "ConfigRuleName": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ComplianceByConfigRules](#API_DescribeComplianceByConfigRule_ResponseSyntax) **   <a name="config-DescribeComplianceByConfigRule-response-ComplianceByConfigRules"></a>
Indicates whether each of the specified Amazon Config rules is compliant.  
Type: Array of [ComplianceByConfigRule](API_ComplianceByConfigRule.md) objects

 ** [NextToken](#API_DescribeComplianceByConfigRule_ResponseSyntax) **   <a name="config-DescribeComplianceByConfigRule-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeComplianceByConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeComplianceByConfigRule) 

# DescribeComplianceByResource


Indicates whether the specified Amazon resources are compliant. If a resource is noncompliant, this operation returns the number of Amazon Config rules that the resource does not comply with.

A resource is compliant if it complies with all the Amazon Config rules that evaluate it. It is noncompliant if it does not comply with one or more of these rules.

If Amazon Config has no current evaluation results for the resource, it returns `INSUFFICIENT_DATA`. This result might indicate one of the following conditions about the rules that evaluate the resource:
+  Amazon Config has never invoked an evaluation for the rule. To check whether it has, use the `DescribeConfigRuleEvaluationStatus` action to get the `LastSuccessfulInvocationTime` and `LastFailedInvocationTime`.
+ The rule's Amazon Lambda function is failing to send evaluation results to Amazon Config. Verify that the role that you assigned to your configuration recorder includes the `config:PutEvaluations` permission. If the rule is a custom rule, verify that the Amazon Lambda execution role includes the `config:PutEvaluations` permission.
+ The rule's Amazon Lambda function has returned `NOT_APPLICABLE` for all evaluation results. This can occur if the resources were deleted or removed from the rule's scope.

## Request Syntax


```
{
   "ComplianceTypes": [ "string" ],
   "Limit": number,
   "NextToken": "string",
   "ResourceId": "string",
   "ResourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ComplianceTypes](#API_DescribeComplianceByResource_RequestSyntax) **   <a name="config-DescribeComplianceByResource-request-ComplianceTypes"></a>
Filters the results by compliance.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 3 items.  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA`   
Required: No

 ** [Limit](#API_DescribeComplianceByResource_RequestSyntax) **   <a name="config-DescribeComplianceByResource-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeComplianceByResource_RequestSyntax) **   <a name="config-DescribeComplianceByResource-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [ResourceId](#API_DescribeComplianceByResource_RequestSyntax) **   <a name="config-DescribeComplianceByResource-request-ResourceId"></a>
The ID of the Amazon resource for which you want compliance information. You can specify only one resource ID. If you specify a resource ID, you must also specify a type for `ResourceType`.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: No

 ** [ResourceType](#API_DescribeComplianceByResource_RequestSyntax) **   <a name="config-DescribeComplianceByResource-request-ResourceType"></a>
The types of Amazon resources for which you want compliance information (for example, `AWS::EC2::Instance`). For this operation, you can specify that the resource type is an Amazon Web Services account by specifying `AWS::::Account`.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "ComplianceByResources": [ 
      { 
         "Compliance": { 
            "ComplianceContributorCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            },
            "ComplianceType": "string"
         },
         "ResourceId": "string",
         "ResourceType": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ComplianceByResources](#API_DescribeComplianceByResource_ResponseSyntax) **   <a name="config-DescribeComplianceByResource-response-ComplianceByResources"></a>
Indicates whether the specified Amazon resource complies with all of the Amazon Config rules that evaluate it.  
Type: Array of [ComplianceByResource](API_ComplianceByResource.md) objects

 ** [NextToken](#API_DescribeComplianceByResource_ResponseSyntax) **   <a name="config-DescribeComplianceByResource-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeComplianceByResource) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeComplianceByResource) 

# DescribeConfigRuleEvaluationStatus


Returns status information for each of your Amazon Config managed rules. The status includes information such as the last time Amazon Config invoked the rule, the last time Amazon Config failed to invoke the rule, and the related error for the last failure.

## Request Syntax


```
{
   "ConfigRuleNames": [ "string" ],
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleNames](#API_DescribeConfigRuleEvaluationStatus_RequestSyntax) **   <a name="config-DescribeConfigRuleEvaluationStatus-request-ConfigRuleNames"></a>
The name of the Amazon Config managed rules for which you want status information. If you do not specify any names, Amazon Config returns status information for all Amazon Config managed rules that you use.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: No

 ** [Limit](#API_DescribeConfigRuleEvaluationStatus_RequestSyntax) **   <a name="config-DescribeConfigRuleEvaluationStatus-request-Limit"></a>
The number of rule evaluation results that you want returned.  
This parameter is required if the rule limit for your account is more than the default of 1000 rules.  
For information about requesting a rule limit increase, see [Amazon Config Limits](http://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html#limits_config) in the * Amazon General Reference Guide*.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 50.  
Required: No

 ** [NextToken](#API_DescribeConfigRuleEvaluationStatus_RequestSyntax) **   <a name="config-DescribeConfigRuleEvaluationStatus-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConfigRulesEvaluationStatus": [ 
      { 
         "ConfigRuleArn": "string",
         "ConfigRuleId": "string",
         "ConfigRuleName": "string",
         "FirstActivatedTime": number,
         "FirstEvaluationStarted": boolean,
         "LastDeactivatedTime": number,
         "LastDebugLogDeliveryStatus": "string",
         "LastDebugLogDeliveryStatusReason": "string",
         "LastDebugLogDeliveryTime": number,
         "LastErrorCode": "string",
         "LastErrorMessage": "string",
         "LastFailedEvaluationTime": number,
         "LastFailedInvocationTime": number,
         "LastSuccessfulEvaluationTime": number,
         "LastSuccessfulInvocationTime": number
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigRulesEvaluationStatus](#API_DescribeConfigRuleEvaluationStatus_ResponseSyntax) **   <a name="config-DescribeConfigRuleEvaluationStatus-response-ConfigRulesEvaluationStatus"></a>
Status information about your Amazon Config managed rules.  
Type: Array of [ConfigRuleEvaluationStatus](API_ConfigRuleEvaluationStatus.md) objects

 ** [NextToken](#API_DescribeConfigRuleEvaluationStatus_ResponseSyntax) **   <a name="config-DescribeConfigRuleEvaluationStatus-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigRuleEvaluationStatus) 

# DescribeConfigRules


Returns details about your Amazon Config rules.

## Request Syntax


```
{
   "ConfigRuleNames": [ "string" ],
   "Filters": { 
      "EvaluationMode": "string"
   },
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleNames](#API_DescribeConfigRules_RequestSyntax) **   <a name="config-DescribeConfigRules-request-ConfigRuleNames"></a>
The names of the Amazon Config rules for which you want details. If you do not specify any names, Amazon Config returns details for all your rules.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: No

 ** [Filters](#API_DescribeConfigRules_RequestSyntax) **   <a name="config-DescribeConfigRules-request-Filters"></a>
Returns a list of Detective or Proactive Amazon Config rules. By default, this API returns an unfiltered list. For more information on Detective or Proactive Amazon Config rules, see [https://docs.amazonaws.cn/config/latest/developerguide/evaluate-config-rules.html](https://docs.amazonaws.cn/config/latest/developerguide/evaluate-config-rules.html) in the * Amazon Config Developer Guide*.  
Type: [DescribeConfigRulesFilters](API_DescribeConfigRulesFilters.md) object  
Required: No

 ** [NextToken](#API_DescribeConfigRules_RequestSyntax) **   <a name="config-DescribeConfigRules-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConfigRules": [ 
      { 
         "ConfigRuleArn": "string",
         "ConfigRuleId": "string",
         "ConfigRuleName": "string",
         "ConfigRuleState": "string",
         "CreatedBy": "string",
         "Description": "string",
         "EvaluationModes": [ 
            { 
               "Mode": "string"
            }
         ],
         "InputParameters": "string",
         "MaximumExecutionFrequency": "string",
         "Scope": { 
            "ComplianceResourceId": "string",
            "ComplianceResourceTypes": [ "string" ],
            "TagKey": "string",
            "TagValue": "string"
         },
         "Source": { 
            "CustomPolicyDetails": { 
               "EnableDebugLogDelivery": boolean,
               "PolicyRuntime": "string",
               "PolicyText": "string"
            },
            "Owner": "string",
            "SourceDetails": [ 
               { 
                  "EventSource": "string",
                  "MaximumExecutionFrequency": "string",
                  "MessageType": "string"
               }
            ],
            "SourceIdentifier": "string"
         }
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigRules](#API_DescribeConfigRules_ResponseSyntax) **   <a name="config-DescribeConfigRules-response-ConfigRules"></a>
The details about your Amazon Config rules.  
Type: Array of [ConfigRule](API_ConfigRule.md) objects

 ** [NextToken](#API_DescribeConfigRules_ResponseSyntax) **   <a name="config-DescribeConfigRules-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigRules) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigRules) 

# DescribeConfigurationAggregators


Returns the details of one or more configuration aggregators. If the configuration aggregator is not specified, this operation returns the details for all the configuration aggregators associated with the account. 

## Request Syntax


```
{
   "ConfigurationAggregatorNames": [ "string" ],
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorNames](#API_DescribeConfigurationAggregators_RequestSyntax) **   <a name="config-DescribeConfigurationAggregators-request-ConfigurationAggregatorNames"></a>
The name of the configuration aggregators.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 10 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: No

 ** [Limit](#API_DescribeConfigurationAggregators_RequestSyntax) **   <a name="config-DescribeConfigurationAggregators-request-Limit"></a>
The maximum number of configuration aggregators returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeConfigurationAggregators_RequestSyntax) **   <a name="config-DescribeConfigurationAggregators-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConfigurationAggregators": [ 
      { 
         "AccountAggregationSources": [ 
            { 
               "AccountIds": [ "string" ],
               "AllAwsRegions": boolean,
               "AwsRegions": [ "string" ]
            }
         ],
         "AggregatorFilters": { 
            "ResourceType": { 
               "Type": "string",
               "Value": [ "string" ]
            },
            "ServicePrincipal": { 
               "Type": "string",
               "Value": [ "string" ]
            }
         },
         "ConfigurationAggregatorArn": "string",
         "ConfigurationAggregatorName": "string",
         "CreatedBy": "string",
         "CreationTime": number,
         "LastUpdatedTime": number,
         "OrganizationAggregationSource": { 
            "AllAwsRegions": boolean,
            "AwsRegions": [ "string" ],
            "RoleArn": "string"
         }
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationAggregators](#API_DescribeConfigurationAggregators_ResponseSyntax) **   <a name="config-DescribeConfigurationAggregators-response-ConfigurationAggregators"></a>
Returns a ConfigurationAggregators object.  
Type: Array of [ConfigurationAggregator](API_ConfigurationAggregator.md) objects

 ** [NextToken](#API_DescribeConfigurationAggregators_ResponseSyntax) **   <a name="config-DescribeConfigurationAggregators-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigurationAggregators) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigurationAggregators) 

# DescribeConfigurationAggregatorSourcesStatus


Returns status information for sources within an aggregator. The status includes information about the last time Amazon Config verified authorization between the source account and an aggregator account. In case of a failure, the status contains the related error code or message. 

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Limit": number,
   "NextToken": "string",
   "UpdateStatus": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_DescribeConfigurationAggregatorSourcesStatus_RequestSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Limit](#API_DescribeConfigurationAggregatorSourcesStatus_RequestSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-request-Limit"></a>
The maximum number of AggregatorSourceStatus returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeConfigurationAggregatorSourcesStatus_RequestSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [UpdateStatus](#API_DescribeConfigurationAggregatorSourcesStatus_RequestSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-request-UpdateStatus"></a>
Filters the status type.  
+ Valid value FAILED indicates errors while moving data.
+ Valid value SUCCEEDED indicates the data was successfully moved.
+ Valid value OUTDATED indicates the data is not the most recent.
Type: Array of strings  
Array Members: Minimum number of 1 item.  
Valid Values: `FAILED | SUCCEEDED | OUTDATED`   
Required: No

## Response Syntax


```
{
   "AggregatedSourceStatusList": [ 
      { 
         "AwsRegion": "string",
         "LastErrorCode": "string",
         "LastErrorMessage": "string",
         "LastUpdateStatus": "string",
         "LastUpdateTime": number,
         "SourceId": "string",
         "SourceType": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregatedSourceStatusList](#API_DescribeConfigurationAggregatorSourcesStatus_ResponseSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-response-AggregatedSourceStatusList"></a>
Returns an AggregatedSourceStatus object.   
Type: Array of [AggregatedSourceStatus](API_AggregatedSourceStatus.md) objects

 ** [NextToken](#API_DescribeConfigurationAggregatorSourcesStatus_ResponseSyntax) **   <a name="config-DescribeConfigurationAggregatorSourcesStatus-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigurationAggregatorSourcesStatus) 

# DescribeConfigurationRecorders


Returns details for the configuration recorder you specify.

If a configuration recorder is not specified, this operation returns details for the customer managed configuration recorder configured for the account, if applicable.

**Note**  
When making a request to this operation, you can only specify one configuration recorder.

## Request Syntax


```
{
   "Arn": "string",
   "ConfigurationRecorderNames": [ "string" ],
   "ServicePrincipal": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Arn](#API_DescribeConfigurationRecorders_RequestSyntax) **   <a name="config-DescribeConfigurationRecorders-request-Arn"></a>
The Amazon Resource Name (ARN) of the configuration recorder that you want to specify.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: No

 ** [ConfigurationRecorderNames](#API_DescribeConfigurationRecorders_RequestSyntax) **   <a name="config-DescribeConfigurationRecorders-request-ConfigurationRecorderNames"></a>
A list of names of the configuration recorders that you want to specify.  
Type: Array of strings  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

 ** [ServicePrincipal](#API_DescribeConfigurationRecorders_RequestSyntax) **   <a name="config-DescribeConfigurationRecorders-request-ServicePrincipal"></a>
For service-linked configuration recorders, you can use the service principal of the linked Amazon Web Services service to specify the configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[\w+=,.@-]+`   
Required: No

## Response Syntax


```
{
   "ConfigurationRecorders": [ 
      { 
         "arn": "string",
         "name": "string",
         "recordingGroup": { 
            "allSupported": boolean,
            "exclusionByResourceTypes": { 
               "resourceTypes": [ "string" ]
            },
            "includeGlobalResourceTypes": boolean,
            "recordingStrategy": { 
               "useOnly": "string"
            },
            "resourceTypes": [ "string" ]
         },
         "recordingMode": { 
            "recordingFrequency": "string",
            "recordingModeOverrides": [ 
               { 
                  "description": "string",
                  "recordingFrequency": "string",
                  "resourceTypes": [ "string" ]
               }
            ]
         },
         "recordingScope": "string",
         "roleARN": "string",
         "servicePrincipal": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationRecorders](#API_DescribeConfigurationRecorders_ResponseSyntax) **   <a name="config-DescribeConfigurationRecorders-response-ConfigurationRecorders"></a>
A list that contains the descriptions of the specified configuration recorders.  
Type: Array of [ConfigurationRecorder](API_ConfigurationRecorder.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigurationRecorders) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigurationRecorders) 

# DescribeConfigurationRecorderStatus


Returns the current status of the configuration recorder you specify as well as the status of the last recording event for the configuration recorders.

For a detailed status of recording events over time, add your Amazon Config events to Amazon CloudWatch metrics and use CloudWatch metrics.

If a configuration recorder is not specified, this operation returns the status for the customer managed configuration recorder configured for the account, if applicable.

**Note**  
When making a request to this operation, you can only specify one configuration recorder.

## Request Syntax


```
{
   "Arn": "string",
   "ConfigurationRecorderNames": [ "string" ],
   "ServicePrincipal": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Arn](#API_DescribeConfigurationRecorderStatus_RequestSyntax) **   <a name="config-DescribeConfigurationRecorderStatus-request-Arn"></a>
The Amazon Resource Name (ARN) of the configuration recorder that you want to specify.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: No

 ** [ConfigurationRecorderNames](#API_DescribeConfigurationRecorderStatus_RequestSyntax) **   <a name="config-DescribeConfigurationRecorderStatus-request-ConfigurationRecorderNames"></a>
The name of the configuration recorder. If the name is not specified, the opertation returns the status for the customer managed configuration recorder configured for the account, if applicable.  
When making a request to this operation, you can only specify one configuration recorder.
Type: Array of strings  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

 ** [ServicePrincipal](#API_DescribeConfigurationRecorderStatus_RequestSyntax) **   <a name="config-DescribeConfigurationRecorderStatus-request-ServicePrincipal"></a>
For service-linked configuration recorders, you can use the service principal of the linked Amazon Web Services service to specify the configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[\w+=,.@-]+`   
Required: No

## Response Syntax


```
{
   "ConfigurationRecordersStatus": [ 
      { 
         "arn": "string",
         "lastErrorCode": "string",
         "lastErrorMessage": "string",
         "lastStartTime": number,
         "lastStatus": "string",
         "lastStatusChangeTime": number,
         "lastStopTime": number,
         "name": "string",
         "recording": boolean,
         "servicePrincipal": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationRecordersStatus](#API_DescribeConfigurationRecorderStatus_ResponseSyntax) **   <a name="config-DescribeConfigurationRecorderStatus-response-ConfigurationRecordersStatus"></a>
A list that contains status of the specified recorders.  
Type: Array of [ConfigurationRecorderStatus](API_ConfigurationRecorderStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConfigurationRecorderStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConfigurationRecorderStatus) 

# DescribeConformancePackCompliance


Returns compliance details for each rule in that conformance pack.

**Note**  
You must provide exact rule names.

## Request Syntax


```
{
   "ConformancePackName": "string",
   "Filters": { 
      "ComplianceType": "string",
      "ConfigRuleNames": [ "string" ]
   },
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackName](#API_DescribeConformancePackCompliance_RequestSyntax) **   <a name="config-DescribeConformancePackCompliance-request-ConformancePackName"></a>
Name of the conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

 ** [Filters](#API_DescribeConformancePackCompliance_RequestSyntax) **   <a name="config-DescribeConformancePackCompliance-request-Filters"></a>
A `ConformancePackComplianceFilters` object.  
Type: [ConformancePackComplianceFilters](API_ConformancePackComplianceFilters.md) object  
Required: No

 ** [Limit](#API_DescribeConformancePackCompliance_RequestSyntax) **   <a name="config-DescribeConformancePackCompliance-request-Limit"></a>
The maximum number of Amazon Config rules within a conformance pack are returned on each page.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 1000.  
Required: No

 ** [NextToken](#API_DescribeConformancePackCompliance_RequestSyntax) **   <a name="config-DescribeConformancePackCompliance-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConformancePackName": "string",
   "ConformancePackRuleComplianceList": [ 
      { 
         "ComplianceType": "string",
         "ConfigRuleName": "string",
         "Controls": [ "string" ]
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackName](#API_DescribeConformancePackCompliance_ResponseSyntax) **   <a name="config-DescribeConformancePackCompliance-response-ConformancePackName"></a>
Name of the conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*` 

 ** [ConformancePackRuleComplianceList](#API_DescribeConformancePackCompliance_ResponseSyntax) **   <a name="config-DescribeConformancePackCompliance-response-ConformancePackRuleComplianceList"></a>
Returns a list of `ConformancePackRuleCompliance` objects.  
Type: Array of [ConformancePackRuleCompliance](API_ConformancePackRuleCompliance.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 1000 items.

 ** [NextToken](#API_DescribeConformancePackCompliance_ResponseSyntax) **   <a name="config-DescribeConformancePackCompliance-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleInConformancePackException **   
 Amazon Config rule that you passed in the filter does not exist.  
HTTP Status Code: 400

 ** NoSuchConformancePackException **   
You specified one or more conformance packs that do not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConformancePackCompliance) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConformancePackCompliance) 

# DescribeConformancePacks


Returns a list of one or more conformance packs.

## Request Syntax


```
{
   "ConformancePackNames": [ "string" ],
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackNames](#API_DescribeConformancePacks_RequestSyntax) **   <a name="config-DescribeConformancePacks-request-ConformancePackNames"></a>
Comma-separated list of conformance pack names for which you want details. If you do not specify any names, Amazon Config returns details for all your conformance packs.   
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: No

 ** [Limit](#API_DescribeConformancePacks_RequestSyntax) **   <a name="config-DescribeConformancePacks-request-Limit"></a>
The maximum number of conformance packs returned on each page.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_DescribeConformancePacks_RequestSyntax) **   <a name="config-DescribeConformancePacks-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConformancePackDetails": [ 
      { 
         "ConformancePackArn": "string",
         "ConformancePackId": "string",
         "ConformancePackInputParameters": [ 
            { 
               "ParameterName": "string",
               "ParameterValue": "string"
            }
         ],
         "ConformancePackName": "string",
         "CreatedBy": "string",
         "DeliveryS3Bucket": "string",
         "DeliveryS3KeyPrefix": "string",
         "LastUpdateRequestedTime": number,
         "TemplateSSMDocumentDetails": { 
            "DocumentName": "string",
            "DocumentVersion": "string"
         }
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackDetails](#API_DescribeConformancePacks_ResponseSyntax) **   <a name="config-DescribeConformancePacks-response-ConformancePackDetails"></a>
Returns a list of `ConformancePackDetail` objects.  
Type: Array of [ConformancePackDetail](API_ConformancePackDetail.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 25 items.

 ** [NextToken](#API_DescribeConformancePacks_ResponseSyntax) **   <a name="config-DescribeConformancePacks-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConformancePackException **   
You specified one or more conformance packs that do not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConformancePacks) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConformancePacks) 

# DescribeConformancePackStatus


Provides one or more conformance packs deployment status.

**Note**  
If there are no conformance packs then you will see an empty result.

## Request Syntax


```
{
   "ConformancePackNames": [ "string" ],
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackNames](#API_DescribeConformancePackStatus_RequestSyntax) **   <a name="config-DescribeConformancePackStatus-request-ConformancePackNames"></a>
Comma-separated list of conformance pack names.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: No

 ** [Limit](#API_DescribeConformancePackStatus_RequestSyntax) **   <a name="config-DescribeConformancePackStatus-request-Limit"></a>
The maximum number of conformance packs status returned on each page.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_DescribeConformancePackStatus_RequestSyntax) **   <a name="config-DescribeConformancePackStatus-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConformancePackStatusDetails": [ 
      { 
         "ConformancePackArn": "string",
         "ConformancePackId": "string",
         "ConformancePackName": "string",
         "ConformancePackState": "string",
         "ConformancePackStatusReason": "string",
         "LastUpdateCompletedTime": number,
         "LastUpdateRequestedTime": number,
         "StackArn": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackStatusDetails](#API_DescribeConformancePackStatus_ResponseSyntax) **   <a name="config-DescribeConformancePackStatus-response-ConformancePackStatusDetails"></a>
A list of `ConformancePackStatusDetail` objects.  
Type: Array of [ConformancePackStatusDetail](API_ConformancePackStatusDetail.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 25 items.

 ** [NextToken](#API_DescribeConformancePackStatus_ResponseSyntax) **   <a name="config-DescribeConformancePackStatus-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeConformancePackStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeConformancePackStatus) 

# DescribeDeliveryChannels


Returns details about the specified delivery channel. If a delivery channel is not specified, this operation returns the details of all delivery channels associated with the account.

**Note**  
Currently, you can specify only one delivery channel per region in your account.

## Request Syntax


```
{
   "DeliveryChannelNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [DeliveryChannelNames](#API_DescribeDeliveryChannels_RequestSyntax) **   <a name="config-DescribeDeliveryChannels-request-DeliveryChannelNames"></a>
A list of delivery channel names.  
Type: Array of strings  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "DeliveryChannels": [ 
      { 
         "configSnapshotDeliveryProperties": { 
            "deliveryFrequency": "string"
         },
         "name": "string",
         "s3BucketName": "string",
         "s3KeyPrefix": "string",
         "s3KmsKeyArn": "string",
         "snsTopicARN": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [DeliveryChannels](#API_DescribeDeliveryChannels_ResponseSyntax) **   <a name="config-DescribeDeliveryChannels-response-DeliveryChannels"></a>
A list that contains the descriptions of the specified delivery channel.  
Type: Array of [DeliveryChannel](API_DeliveryChannel.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchDeliveryChannelException **   
You have specified a delivery channel that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeDeliveryChannels) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeDeliveryChannels) 

# DescribeDeliveryChannelStatus


Returns the current status of the specified delivery channel. If a delivery channel is not specified, this operation returns the current status of all delivery channels associated with the account.

**Note**  
Currently, you can specify only one delivery channel per region in your account.

## Request Syntax


```
{
   "DeliveryChannelNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [DeliveryChannelNames](#API_DescribeDeliveryChannelStatus_RequestSyntax) **   <a name="config-DescribeDeliveryChannelStatus-request-DeliveryChannelNames"></a>
A list of delivery channel names.  
Type: Array of strings  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "DeliveryChannelsStatus": [ 
      { 
         "configHistoryDeliveryInfo": { 
            "lastAttemptTime": number,
            "lastErrorCode": "string",
            "lastErrorMessage": "string",
            "lastStatus": "string",
            "lastSuccessfulTime": number,
            "nextDeliveryTime": number
         },
         "configSnapshotDeliveryInfo": { 
            "lastAttemptTime": number,
            "lastErrorCode": "string",
            "lastErrorMessage": "string",
            "lastStatus": "string",
            "lastSuccessfulTime": number,
            "nextDeliveryTime": number
         },
         "configStreamDeliveryInfo": { 
            "lastErrorCode": "string",
            "lastErrorMessage": "string",
            "lastStatus": "string",
            "lastStatusChangeTime": number
         },
         "name": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [DeliveryChannelsStatus](#API_DescribeDeliveryChannelStatus_ResponseSyntax) **   <a name="config-DescribeDeliveryChannelStatus-response-DeliveryChannelsStatus"></a>
A list that contains the status of a specified delivery channel.  
Type: Array of [DeliveryChannelStatus](API_DeliveryChannelStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchDeliveryChannelException **   
You have specified a delivery channel that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeDeliveryChannelStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeDeliveryChannelStatus) 

# DescribeOrganizationConfigRules


Returns a list of organization Amazon Config rules. 

**Note**  
When you specify the limit and the next token, you receive a paginated response.  
Limit and next token are not applicable if you specify organization Amazon Config rule names. It is only applicable, when you request all the organization Amazon Config rules.  
 *For accounts within an organization*   
If you deploy an organizational rule or conformance pack in an organization administrator account, and then establish a delegated administrator and deploy an organizational rule or conformance pack in the delegated administrator account, you won't be able to see the organizational rule or conformance pack in the organization administrator account from the delegated administrator account or see the organizational rule or conformance pack in the delegated administrator account from organization administrator account. The `DescribeOrganizationConfigRules` and `DescribeOrganizationConformancePacks` APIs can only see and interact with the organization-related resource that were deployed from within the account calling those APIs.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string",
   "OrganizationConfigRuleNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribeOrganizationConfigRules_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRules-request-Limit"></a>
The maximum number of organization Amazon Config rules returned on each page. If you do no specify a number, Amazon Config uses the default. The default is 100.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeOrganizationConfigRules_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRules-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [OrganizationConfigRuleNames](#API_DescribeOrganizationConfigRules_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRules-request-OrganizationConfigRuleNames"></a>
The names of organization Amazon Config rules for which you want details. If you do not specify any names, Amazon Config returns details for all your organization Amazon Config rules.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConfigRules": [ 
      { 
         "ExcludedAccounts": [ "string" ],
         "LastUpdateTime": number,
         "OrganizationConfigRuleArn": "string",
         "OrganizationConfigRuleName": "string",
         "OrganizationCustomPolicyRuleMetadata": { 
            "DebugLogDeliveryAccounts": [ "string" ],
            "Description": "string",
            "InputParameters": "string",
            "MaximumExecutionFrequency": "string",
            "OrganizationConfigRuleTriggerTypes": [ "string" ],
            "PolicyRuntime": "string",
            "ResourceIdScope": "string",
            "ResourceTypesScope": [ "string" ],
            "TagKeyScope": "string",
            "TagValueScope": "string"
         },
         "OrganizationCustomRuleMetadata": { 
            "Description": "string",
            "InputParameters": "string",
            "LambdaFunctionArn": "string",
            "MaximumExecutionFrequency": "string",
            "OrganizationConfigRuleTriggerTypes": [ "string" ],
            "ResourceIdScope": "string",
            "ResourceTypesScope": [ "string" ],
            "TagKeyScope": "string",
            "TagValueScope": "string"
         },
         "OrganizationManagedRuleMetadata": { 
            "Description": "string",
            "InputParameters": "string",
            "MaximumExecutionFrequency": "string",
            "ResourceIdScope": "string",
            "ResourceTypesScope": [ "string" ],
            "RuleIdentifier": "string",
            "TagKeyScope": "string",
            "TagValueScope": "string"
         }
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeOrganizationConfigRules_ResponseSyntax) **   <a name="config-DescribeOrganizationConfigRules-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [OrganizationConfigRules](#API_DescribeOrganizationConfigRules_ResponseSyntax) **   <a name="config-DescribeOrganizationConfigRules-response-OrganizationConfigRules"></a>
Returns a list of `OrganizationConfigRule` objects.  
Type: Array of [OrganizationConfigRule](API_OrganizationConfigRule.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an organization Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeOrganizationConfigRules) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeOrganizationConfigRules) 

# DescribeOrganizationConfigRuleStatuses


Provides organization Amazon Config rule deployment status for an organization.

**Note**  
The status is not considered successful until organization Amazon Config rule is successfully deployed in all the member accounts with an exception of excluded accounts.  
When you specify the limit and the next token, you receive a paginated response. Limit and next token are not applicable if you specify organization Amazon Config rule names. It is only applicable, when you request all the organization Amazon Config rules.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string",
   "OrganizationConfigRuleNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribeOrganizationConfigRuleStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRuleStatuses-request-Limit"></a>
The maximum number of `OrganizationConfigRuleStatuses` returned on each page. If you do no specify a number, Amazon Config uses the default. The default is 100.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeOrganizationConfigRuleStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRuleStatuses-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [OrganizationConfigRuleNames](#API_DescribeOrganizationConfigRuleStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConfigRuleStatuses-request-OrganizationConfigRuleNames"></a>
The names of organization Amazon Config rules for which you want status details. If you do not specify any names, Amazon Config returns details for all your organization Amazon Config rules.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConfigRuleStatuses": [ 
      { 
         "ErrorCode": "string",
         "ErrorMessage": "string",
         "LastUpdateTime": number,
         "OrganizationConfigRuleName": "string",
         "OrganizationRuleStatus": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeOrganizationConfigRuleStatuses_ResponseSyntax) **   <a name="config-DescribeOrganizationConfigRuleStatuses-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [OrganizationConfigRuleStatuses](#API_DescribeOrganizationConfigRuleStatuses_ResponseSyntax) **   <a name="config-DescribeOrganizationConfigRuleStatuses-response-OrganizationConfigRuleStatuses"></a>
A list of `OrganizationConfigRuleStatus` objects.  
Type: Array of [OrganizationConfigRuleStatus](API_OrganizationConfigRuleStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an organization Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeOrganizationConfigRuleStatuses) 

# DescribeOrganizationConformancePacks


Returns a list of organization conformance packs. 

**Note**  
When you specify the limit and the next token, you receive a paginated response.   
Limit and next token are not applicable if you specify organization conformance packs names. They are only applicable, when you request all the organization conformance packs.   
 *For accounts within an organization*   
If you deploy an organizational rule or conformance pack in an organization administrator account, and then establish a delegated administrator and deploy an organizational rule or conformance pack in the delegated administrator account, you won't be able to see the organizational rule or conformance pack in the organization administrator account from the delegated administrator account or see the organizational rule or conformance pack in the delegated administrator account from organization administrator account. The `DescribeOrganizationConfigRules` and `DescribeOrganizationConformancePacks` APIs can only see and interact with the organization-related resource that were deployed from within the account calling those APIs.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string",
   "OrganizationConformancePackNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribeOrganizationConformancePacks_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePacks-request-Limit"></a>
The maximum number of organization config packs returned on each page. If you do no specify a number, Amazon Config uses the default. The default is 100.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeOrganizationConformancePacks_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePacks-request-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [OrganizationConformancePackNames](#API_DescribeOrganizationConformancePacks_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePacks-request-OrganizationConformancePackNames"></a>
The name that you assign to an organization conformance pack.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConformancePacks": [ 
      { 
         "ConformancePackInputParameters": [ 
            { 
               "ParameterName": "string",
               "ParameterValue": "string"
            }
         ],
         "DeliveryS3Bucket": "string",
         "DeliveryS3KeyPrefix": "string",
         "ExcludedAccounts": [ "string" ],
         "LastUpdateTime": number,
         "OrganizationConformancePackArn": "string",
         "OrganizationConformancePackName": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeOrganizationConformancePacks_ResponseSyntax) **   <a name="config-DescribeOrganizationConformancePacks-response-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [OrganizationConformancePacks](#API_DescribeOrganizationConformancePacks_ResponseSyntax) **   <a name="config-DescribeOrganizationConformancePacks-response-OrganizationConformancePacks"></a>
Returns a list of OrganizationConformancePacks objects.  
Type: Array of [OrganizationConformancePack](API_OrganizationConformancePack.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConformancePackException **   
 Amazon Config organization conformance pack that you passed in the filter does not exist.  
For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeOrganizationConformancePacks) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeOrganizationConformancePacks) 

# DescribeOrganizationConformancePackStatuses


Provides organization conformance pack deployment status for an organization. 

**Note**  
The status is not considered successful until organization conformance pack is successfully deployed in all the member accounts with an exception of excluded accounts.  
When you specify the limit and the next token, you receive a paginated response. Limit and next token are not applicable if you specify organization conformance pack names. They are only applicable, when you request all the organization conformance packs.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string",
   "OrganizationConformancePackNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribeOrganizationConformancePackStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePackStatuses-request-Limit"></a>
The maximum number of OrganizationConformancePackStatuses returned on each page. If you do no specify a number, Amazon Config uses the default. The default is 100.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeOrganizationConformancePackStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePackStatuses-request-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [OrganizationConformancePackNames](#API_DescribeOrganizationConformancePackStatuses_RequestSyntax) **   <a name="config-DescribeOrganizationConformancePackStatuses-request-OrganizationConformancePackNames"></a>
The names of organization conformance packs for which you want status details. If you do not specify any names, Amazon Config returns details for all your organization conformance packs.   
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConformancePackStatuses": [ 
      { 
         "ErrorCode": "string",
         "ErrorMessage": "string",
         "LastUpdateTime": number,
         "OrganizationConformancePackName": "string",
         "Status": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeOrganizationConformancePackStatuses_ResponseSyntax) **   <a name="config-DescribeOrganizationConformancePackStatuses-response-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [OrganizationConformancePackStatuses](#API_DescribeOrganizationConformancePackStatuses_ResponseSyntax) **   <a name="config-DescribeOrganizationConformancePackStatuses-response-OrganizationConformancePackStatuses"></a>
A list of `OrganizationConformancePackStatus` objects.   
Type: Array of [OrganizationConformancePackStatus](API_OrganizationConformancePackStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConformancePackException **   
 Amazon Config organization conformance pack that you passed in the filter does not exist.  
For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeOrganizationConformancePackStatuses) 

# DescribePendingAggregationRequests


Returns a list of all pending aggregation requests.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_DescribePendingAggregationRequests_RequestSyntax) **   <a name="config-DescribePendingAggregationRequests-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_DescribePendingAggregationRequests_RequestSyntax) **   <a name="config-DescribePendingAggregationRequests-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "PendingAggregationRequests": [ 
      { 
         "RequesterAccountId": "string",
         "RequesterAwsRegion": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribePendingAggregationRequests_ResponseSyntax) **   <a name="config-DescribePendingAggregationRequests-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [PendingAggregationRequests](#API_DescribePendingAggregationRequests_ResponseSyntax) **   <a name="config-DescribePendingAggregationRequests-response-PendingAggregationRequests"></a>
Returns a PendingAggregationRequests object.  
Type: Array of [PendingAggregationRequest](API_PendingAggregationRequest.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribePendingAggregationRequests) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribePendingAggregationRequests) 

# DescribeRemediationConfigurations


Returns the details of one or more remediation configurations.

## Request Syntax


```
{
   "ConfigRuleNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleNames](#API_DescribeRemediationConfigurations_RequestSyntax) **   <a name="config-DescribeRemediationConfigurations-request-ConfigRuleNames"></a>
A list of Amazon Config rule names of remediation configurations for which you want details.   
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

## Response Syntax


```
{
   "RemediationConfigurations": [ 
      { 
         "Arn": "string",
         "Automatic": boolean,
         "ConfigRuleName": "string",
         "CreatedByService": "string",
         "ExecutionControls": { 
            "SsmControls": { 
               "ConcurrentExecutionRatePercentage": number,
               "ErrorPercentage": number
            }
         },
         "MaximumAutomaticAttempts": number,
         "Parameters": { 
            "string" : { 
               "ResourceValue": { 
                  "Value": "string"
               },
               "StaticValue": { 
                  "Values": [ "string" ]
               }
            }
         },
         "ResourceType": "string",
         "RetryAttemptSeconds": number,
         "TargetId": "string",
         "TargetType": "string",
         "TargetVersion": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [RemediationConfigurations](#API_DescribeRemediationConfigurations_ResponseSyntax) **   <a name="config-DescribeRemediationConfigurations-response-RemediationConfigurations"></a>
Returns a remediation configuration object.  
Type: Array of [RemediationConfiguration](API_RemediationConfiguration.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 25 items.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeRemediationConfigurations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeRemediationConfigurations) 

# DescribeRemediationExceptions


Returns the details of one or more remediation exceptions. A detailed view of a remediation exception for a set of resources that includes an explanation of an exception and the time when the exception will be deleted. When you specify the limit and the next token, you receive a paginated response. 

**Note**  
 Amazon Config generates a remediation exception when a problem occurs executing a remediation action to a specific resource. Remediation exceptions blocks auto-remediation until the exception is cleared.  
When you specify the limit and the next token, you receive a paginated response.   
Limit and next token are not applicable if you request resources in batch. It is only applicable, when you request all resources.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "Limit": number,
   "NextToken": "string",
   "ResourceKeys": [ 
      { 
         "ResourceId": "string",
         "ResourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DescribeRemediationExceptions_RequestSyntax) **   <a name="config-DescribeRemediationExceptions-request-ConfigRuleName"></a>
The name of the Amazon Config rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [Limit](#API_DescribeRemediationExceptions_RequestSyntax) **   <a name="config-DescribeRemediationExceptions-request-Limit"></a>
The maximum number of RemediationExceptionResourceKey returned on each page. The default is 25. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeRemediationExceptions_RequestSyntax) **   <a name="config-DescribeRemediationExceptions-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

 ** [ResourceKeys](#API_DescribeRemediationExceptions_RequestSyntax) **   <a name="config-DescribeRemediationExceptions-request-ResourceKeys"></a>
An exception list of resource exception keys to be processed with the current request. Amazon Config adds exception for each resource key. For example, Amazon Config adds 3 exceptions for 3 resource keys.   
Type: Array of [RemediationExceptionResourceKey](API_RemediationExceptionResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "RemediationExceptions": [ 
      { 
         "ConfigRuleName": "string",
         "ExpirationTime": number,
         "Message": "string",
         "ResourceId": "string",
         "ResourceType": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeRemediationExceptions_ResponseSyntax) **   <a name="config-DescribeRemediationExceptions-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String

 ** [RemediationExceptions](#API_DescribeRemediationExceptions_ResponseSyntax) **   <a name="config-DescribeRemediationExceptions-response-RemediationExceptions"></a>
Returns a list of remediation exception objects.  
Type: Array of [RemediationException](API_RemediationException.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 25 items.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeRemediationExceptions) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeRemediationExceptions) 

# DescribeRemediationExecutionStatus


Provides a detailed view of a Remediation Execution for a set of resources including state, timestamps for when steps for the remediation execution occur, and any error messages for steps that have failed. When you specify the limit and the next token, you receive a paginated response.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "Limit": number,
   "NextToken": "string",
   "ResourceKeys": [ 
      { 
         "resourceId": "string",
         "resourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_DescribeRemediationExecutionStatus_RequestSyntax) **   <a name="config-DescribeRemediationExecutionStatus-request-ConfigRuleName"></a>
The name of the Amazon Config rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [Limit](#API_DescribeRemediationExecutionStatus_RequestSyntax) **   <a name="config-DescribeRemediationExecutionStatus-request-Limit"></a>
The maximum number of RemediationExecutionStatuses returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_DescribeRemediationExecutionStatus_RequestSyntax) **   <a name="config-DescribeRemediationExecutionStatus-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [ResourceKeys](#API_DescribeRemediationExecutionStatus_RequestSyntax) **   <a name="config-DescribeRemediationExecutionStatus-request-ResourceKeys"></a>
A list of resource keys to be processed with the current request. Each element in the list consists of the resource type and resource ID.   
Type: Array of [ResourceKey](API_ResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "RemediationExecutionStatuses": [ 
      { 
         "InvocationTime": number,
         "LastUpdatedTime": number,
         "ResourceKey": { 
            "resourceId": "string",
            "resourceType": "string"
         },
         "State": "string",
         "StepDetails": [ 
            { 
               "ErrorMessage": "string",
               "Name": "string",
               "StartTime": number,
               "State": "string",
               "StopTime": number
            }
         ]
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeRemediationExecutionStatus_ResponseSyntax) **   <a name="config-DescribeRemediationExecutionStatus-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [RemediationExecutionStatuses](#API_DescribeRemediationExecutionStatus_ResponseSyntax) **   <a name="config-DescribeRemediationExecutionStatus-response-RemediationExecutionStatuses"></a>
Returns a list of remediation execution statuses objects.  
Type: Array of [RemediationExecutionStatus](API_RemediationExecutionStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchRemediationConfigurationException **   
You specified an Amazon Config rule without a remediation configuration.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeRemediationExecutionStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeRemediationExecutionStatus) 

# DescribeRetentionConfigurations


Returns the details of one or more retention configurations. If the retention configuration name is not specified, this operation returns the details for all the retention configurations for that account.

**Note**  
Currently, Amazon Config supports only one retention configuration per region in your account.

## Request Syntax


```
{
   "NextToken": "string",
   "RetentionConfigurationNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [NextToken](#API_DescribeRetentionConfigurations_RequestSyntax) **   <a name="config-DescribeRetentionConfigurations-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [RetentionConfigurationNames](#API_DescribeRetentionConfigurations_RequestSyntax) **   <a name="config-DescribeRetentionConfigurations-request-RetentionConfigurationNames"></a>
A list of names of retention configurations for which you want details. If you do not specify a name, Amazon Config returns details for all the retention configurations for that account.  
Currently, Amazon Config supports only one retention configuration per region in your account.
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 1 item.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "RetentionConfigurations": [ 
      { 
         "Name": "string",
         "RetentionPeriodInDays": number
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_DescribeRetentionConfigurations_ResponseSyntax) **   <a name="config-DescribeRetentionConfigurations-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [RetentionConfigurations](#API_DescribeRetentionConfigurations_ResponseSyntax) **   <a name="config-DescribeRetentionConfigurations-response-RetentionConfigurations"></a>
Returns a retention configuration object.  
Type: Array of [RetentionConfiguration](API_RetentionConfiguration.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchRetentionConfigurationException **   
You have specified a retention configuration that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DescribeRetentionConfigurations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DescribeRetentionConfigurations) 

# DisassociateResourceTypes


Removes all resource types specified in the `ResourceTypes` list from the [RecordingGroup](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingGroup.html) of configuration recorder and excludes these resource types when recording.

For this operation, the configuration recorder must use a [RecordingStrategy](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingStrategy.html) that is either `INCLUSION_BY_RESOURCE_TYPES` or `EXCLUSION_BY_RESOURCE_TYPES`.

## Request Syntax


```
{
   "ConfigurationRecorderArn": "string",
   "ResourceTypes": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorderArn](#API_DisassociateResourceTypes_RequestSyntax) **   <a name="config-DisassociateResourceTypes-request-ConfigurationRecorderArn"></a>
The Amazon Resource Name (ARN) of the specified configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: Yes

 ** [ResourceTypes](#API_DisassociateResourceTypes_RequestSyntax) **   <a name="config-DisassociateResourceTypes-request-ResourceTypes"></a>
The list of resource types you want to remove from the recording group of the specified configuration recorder.  
Type: Array of strings  
Valid Values: `AWS::EC2::CustomerGateway | AWS::EC2::EIP | AWS::EC2::Host | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInterface | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::Subnet | AWS::CloudTrail::Trail | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::EC2::RegisteredHAInstance | AWS::EC2::NatGateway | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::FlowLog | AWS::EC2::VPCPeeringConnection | AWS::Elasticsearch::Domain | AWS::IAM::Group | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::User | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::ACM::Certificate | AWS::RDS::DBInstance | AWS::RDS::DBSubnetGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBCluster | AWS::RDS::DBClusterSnapshot | AWS::RDS::EventSubscription | AWS::S3::Bucket | AWS::S3::AccountPublicAccessBlock | AWS::Redshift::Cluster | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::SSM::ManagedInstanceInventory | AWS::CloudWatch::Alarm | AWS::CloudFormation::Stack | AWS::ElasticLoadBalancing::LoadBalancer | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::DynamoDB::Table | AWS::CodeBuild::Project | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::Lambda::Function | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::RuleGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::WAFv2::WebACL | AWS::WAFv2::RuleGroup | AWS::WAFv2::IPSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::ManagedRuleSet | AWS::XRay::EncryptionConfig | AWS::SSM::AssociationCompliance | AWS::SSM::PatchCompliance | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::ApiGateway::Stage | AWS::ApiGateway::RestApi | AWS::ApiGatewayV2::Stage | AWS::ApiGatewayV2::Api | AWS::CodePipeline::Pipeline | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::Portfolio | AWS::SQS::Queue | AWS::KMS::Key | AWS::QLDB::Ledger | AWS::SecretsManager::Secret | AWS::SNS::Topic | AWS::SSM::FileData | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::ECR::Repository | AWS::ECS::Cluster | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EKS::Cluster | AWS::OpenSearch::Domain | AWS::EC2::TransitGateway | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::EC2::LaunchTemplate | AWS::ECR::PublicRepository | AWS::GuardDuty::Detector | AWS::EMR::SecurityConfiguration | AWS::SageMaker::CodeRepository | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::EventSubscription | AWS::MSK::Cluster | AWS::StepFunctions::Activity | AWS::WorkSpaces::Workspace | AWS::WorkSpaces::ConnectionAlias | AWS::SageMaker::Model | AWS::ElasticLoadBalancingV2::Listener | AWS::StepFunctions::StateMachine | AWS::Batch::JobQueue | AWS::Batch::ComputeEnvironment | AWS::AccessAnalyzer::Analyzer | AWS::Athena::WorkGroup | AWS::Athena::DataCatalog | AWS::Detective::Graph | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayRouteTable | AWS::DMS::Certificate | AWS::AppConfig::Application | AWS::AppSync::GraphQLApi | AWS::DataSync::LocationSMB | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationS3 | AWS::DataSync::LocationEFS | AWS::DataSync::Task | AWS::DataSync::LocationNFS | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EKS::FargateProfile | AWS::Glue::Job | AWS::GuardDuty::ThreatIntelSet | AWS::GuardDuty::IPSet | AWS::SageMaker::Workteam | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::ServiceDiscovery::Service | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::SES::ContactList | AWS::SES::ConfigurationSet | AWS::Route53::HostedZone | AWS::IoTEvents::Input | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::AlarmModel | AWS::ServiceDiscovery::HttpNamespace | AWS::Events::EventBus | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::InfrastructureConfiguration | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationHDFS | AWS::Glue::Classifier | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::ECR::RegistryPolicy | AWS::Backup::ReportPlan | AWS::Lightsail::Certificate | AWS::RUM::AppMonitor | AWS::Events::Endpoint | AWS::SES::ReceiptRuleSet | AWS::Events::Archive | AWS::Events::ApiDestination | AWS::Lightsail::Disk | AWS::FIS::ExperimentTemplate | AWS::DataSync::LocationFSxWindows | AWS::SES::ReceiptFilter | AWS::GuardDuty::Filter | AWS::SES::Template | AWS::AmazonMQ::Broker | AWS::AppConfig::Environment | AWS::AppConfig::ConfigurationProfile | AWS::Cloud9::EnvironmentEC2 | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Discoverer | AWS::FraudDetector::Label | AWS::FraudDetector::EntityType | AWS::FraudDetector::Variable | AWS::FraudDetector::Outcome | AWS::IoT::Authorizer | AWS::IoT::SecurityProfile | AWS::IoT::RoleAlias | AWS::IoT::Dimension | AWS::IoTAnalytics::Datastore | AWS::Lightsail::Bucket | AWS::Lightsail::StaticIp | AWS::MediaPackage::PackagingGroup | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::ResilienceHub::ResiliencyPolicy | AWS::Transfer::Workflow | AWS::EKS::IdentityProviderConfig | AWS::EKS::Addon | AWS::Glue::MLTransform | AWS::IoT::Policy | AWS::IoT::MitigationAction | AWS::IoTTwinMaker::Workspace | AWS::IoTTwinMaker::Entity | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Pipeline | AWS::IoTAnalytics::Channel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Project | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::AssetModel | AWS::IVS::Channel | AWS::IVS::RecordingConfiguration | AWS::IVS::PlaybackKeyPair | AWS::KinesisAnalyticsV2::Application | AWS::RDS::GlobalCluster | AWS::S3::MultiRegionAccessPoint | AWS::DeviceFarm::TestGridProject | AWS::Budgets::BudgetsAction | AWS::Lex::Bot | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::IoT::CustomMetric | AWS::Route53Resolver::FirewallDomainList | AWS::RoboMaker::RobotApplicationVersion | AWS::EC2::TrafficMirrorSession | AWS::IoTSiteWise::Gateway | AWS::Lex::BotAlias | AWS::LookoutMetrics::Alert | AWS::IoT::AccountAuditConfiguration | AWS::EC2::TrafficMirrorTarget | AWS::S3::StorageLens | AWS::IoT::ScheduledAudit | AWS::Events::Connection | AWS::EventSchemas::Schema | AWS::MediaPackage::PackagingConfiguration | AWS::KinesisVideo::SignalingChannel | AWS::AppStream::DirectoryConfig | AWS::LookoutVision::Project | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryReadiness::ResourceSet | AWS::RoboMaker::SimulationApplication | AWS::RoboMaker::RobotApplication | AWS::HealthLake::FHIRDatastore | AWS::Pinpoint::Segment | AWS::Pinpoint::ApplicationSettings | AWS::Events::Rule | AWS::EC2::DHCPOptions | AWS::EC2::NetworkInsightsPath | AWS::EC2::TrafficMirrorFilter | AWS::EC2::IPAM | AWS::IoTTwinMaker::Scene | AWS::NetworkManager::TransitGatewayRegistration | AWS::CustomerProfiles::Domain | AWS::AutoScaling::WarmPool | AWS::Connect::PhoneNumber | AWS::AppConfig::DeploymentStrategy | AWS::AppFlow::Flow | AWS::AuditManager::Assessment | AWS::CloudWatch::MetricStream | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::EC2::EC2Fleet | AWS::EC2::SubnetRouteTableAssociation | AWS::ECR::PullThroughCacheRule | AWS::GroundStation::Config | AWS::ImageBuilder::ImagePipeline | AWS::IoT::FleetMetric | AWS::IoTWireless::ServiceProfile | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::Site | AWS::Panorama::Package | AWS::Pinpoint::App | AWS::Redshift::ScheduledAction | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::SageMaker::AppImageConfig | AWS::SageMaker::Image | AWS::ECS::TaskSet | AWS::Cassandra::Keyspace | AWS::Signer::SigningProfile | AWS::Amplify::App | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualService | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::CodeArtifact::Repository | AWS::EC2::PrefixList | AWS::EC2::SpotFleet | AWS::Evidently::Project | AWS::Forecast::Dataset | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::Pinpoint::Campaign | AWS::Pinpoint::InAppTemplate | AWS::SageMaker::Domain | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::KinesisFirehose::DeliveryStream | AWS::Amplify::Branch | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::Route | AWS::Athena::PreparedStatement | AWS::EC2::IPAMScope | AWS::Evidently::Launch | AWS::Forecast::DatasetGroup | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::MissionProfile | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaTailor::PlaybackConfiguration | AWS::MSK::Configuration | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::ResilienceHub::App | AWS::ACMPCA::CertificateAuthority | AWS::AppConfig::HostedConfigurationVersion | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualRouter | AWS::AppRunner::Service | AWS::CustomerProfiles::ObjectType | AWS::DMS::Endpoint | AWS::EC2::CapacityReservation | AWS::EC2::ClientVpnEndpoint | AWS::Kendra::Index | AWS::KinesisVideo::Stream | AWS::Logs::Destination | AWS::Pinpoint::EmailChannel | AWS::S3::AccessPoint | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::LinkAssociation | AWS::IoTWireless::MulticastGroup | AWS::Personalize::DatasetGroup | AWS::IoTTwinMaker::ComponentType | AWS::CodeBuild::ReportGroup | AWS::SageMaker::FeatureGroup | AWS::MSK::BatchScramSecret | AWS::AppStream::Stack | AWS::IoT::JobTemplate | AWS::IoTWireless::FuotaTask | AWS::IoT::ProvisioningTemplate | AWS::InspectorV2::Filter | AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation | AWS::ServiceDiscovery::Instance | AWS::Transfer::Certificate | AWS::MediaConnect::FlowSource | AWS::APS::RuleGroupsNamespace | AWS::CodeGuruProfiler::ProfilingGroup | AWS::Route53Resolver::ResolverQueryLoggingConfig | AWS::Batch::SchedulingPolicy | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::Connect::Instance | AWS::Connect::QuickConnect | AWS::EC2::CarrierGateway | AWS::EC2::IPAMPool | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::ECS::CapacityProvider | AWS::IAM::InstanceProfile | AWS::IoT::CACertificate | AWS::IoTTwinMaker::SyncJob | AWS::KafkaConnect::Connector | AWS::Lambda::CodeSigningConfig | AWS::NetworkManager::ConnectPeer | AWS::ResourceExplorer2::Index | AWS::AppStream::Fleet | AWS::Cognito::UserPool | AWS::Cognito::UserPoolClient | AWS::Cognito::UserPoolGroup | AWS::EC2::NetworkInsightsAccessScope | AWS::EC2::NetworkInsightsAnalysis | AWS::Grafana::Workspace | AWS::GroundStation::DataflowEndpointGroup | AWS::ImageBuilder::ImageRecipe | AWS::KMS::Alias | AWS::M2::Environment | AWS::QuickSight::DataSource | AWS::QuickSight::Template | AWS::QuickSight::Theme | AWS::RDS::OptionGroup | AWS::Redshift::EndpointAccess | AWS::Route53Resolver::FirewallRuleGroup | AWS::SSM::Document`   
Required: Yes

## Response Syntax


```
{
   "ConfigurationRecorder": { 
      "arn": "string",
      "name": "string",
      "recordingGroup": { 
         "allSupported": boolean,
         "exclusionByResourceTypes": { 
            "resourceTypes": [ "string" ]
         },
         "includeGlobalResourceTypes": boolean,
         "recordingStrategy": { 
            "useOnly": "string"
         },
         "resourceTypes": [ "string" ]
      },
      "recordingMode": { 
         "recordingFrequency": "string",
         "recordingModeOverrides": [ 
            { 
               "description": "string",
               "recordingFrequency": "string",
               "resourceTypes": [ "string" ]
            }
         ]
      },
      "recordingScope": "string",
      "roleARN": "string",
      "servicePrincipal": "string"
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationRecorder](#API_DisassociateResourceTypes_ResponseSyntax) **   <a name="config-DisassociateResourceTypes-response-ConfigurationRecorder"></a>
Records configuration changes to the resource types in scope.  
For more information about the configuration recorder, see [https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html](https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html) in the * Amazon Config Developer Guide*.  
Type: [ConfigurationRecorder](API_ConfigurationRecorder.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ConflictException **   
For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.  
For [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html), you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.  
For [DeleteDeliveryChannel](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteDeliveryChannel.html), you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html) operation to stop the customer managed configuration recorder.  
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.
+ For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/DisassociateResourceTypes) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/DisassociateResourceTypes) 

# GetAggregateComplianceDetailsByConfigRule


Returns the evaluation results for the specified Amazon Config rule for a specific resource in a rule. The results indicate which Amazon resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule. 

**Note**  
The results can return an empty result page. But if you have a `nextToken`, the results are displayed on the next page.

## Request Syntax


```
{
   "AccountId": "string",
   "AwsRegion": "string",
   "ComplianceType": "string",
   "ConfigRuleName": "string",
   "ConfigurationAggregatorName": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [AccountId](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-AccountId"></a>
The 12-digit account ID of the source account.  
Type: String  
Pattern: `\d{12}`   
Required: Yes

 ** [AwsRegion](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-AwsRegion"></a>
The source region from where the data is aggregated.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

 ** [ComplianceType](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-ComplianceType"></a>
The resource compliance status.  
For the `GetAggregateComplianceDetailsByConfigRuleRequest` data type, Amazon Config supports only the `COMPLIANT` and `NON_COMPLIANT`. Amazon Config does not support the `NOT_APPLICABLE` and `INSUFFICIENT_DATA` values.
Type: String  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA`   
Required: No

 ** [ConfigRuleName](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want compliance information.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ConfigurationAggregatorName](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Limit](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is 50. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetAggregateComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregateEvaluationResults": [ 
      { 
         "AccountId": "string",
         "Annotation": "string",
         "AwsRegion": "string",
         "ComplianceType": "string",
         "ConfigRuleInvokedTime": number,
         "EvaluationResultIdentifier": { 
            "EvaluationResultQualifier": { 
               "ConfigRuleName": "string",
               "EvaluationMode": "string",
               "ResourceId": "string",
               "ResourceType": "string"
            },
            "OrderingTimestamp": number,
            "ResourceEvaluationId": "string"
         },
         "ResultRecordedTime": number
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregateEvaluationResults](#API_GetAggregateComplianceDetailsByConfigRule_ResponseSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-response-AggregateEvaluationResults"></a>
Returns an AggregateEvaluationResults object.  
Type: Array of [AggregateEvaluationResult](API_AggregateEvaluationResult.md) objects

 ** [NextToken](#API_GetAggregateComplianceDetailsByConfigRule_ResponseSyntax) **   <a name="config-GetAggregateComplianceDetailsByConfigRule-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetAggregateComplianceDetailsByConfigRule) 

# GetAggregateConfigRuleComplianceSummary


Returns the number of compliant and noncompliant rules for one or more accounts and regions in an aggregator.

**Note**  
The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "AwsRegion": "string"
   },
   "GroupByKey": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_GetAggregateConfigRuleComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_GetAggregateConfigRuleComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-request-Filters"></a>
Filters the results based on the ConfigRuleComplianceSummaryFilters object.  
Type: [ConfigRuleComplianceSummaryFilters](API_ConfigRuleComplianceSummaryFilters.md) object  
Required: No

 ** [GroupByKey](#API_GetAggregateConfigRuleComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-request-GroupByKey"></a>
Groups the result based on ACCOUNT\$1ID or AWS\$1REGION.  
Type: String  
Valid Values: `ACCOUNT_ID | AWS_REGION`   
Required: No

 ** [Limit](#API_GetAggregateConfigRuleComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 1000.  
Required: No

 ** [NextToken](#API_GetAggregateConfigRuleComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregateComplianceCounts": [ 
      { 
         "ComplianceSummary": { 
            "ComplianceSummaryTimestamp": number,
            "CompliantResourceCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            },
            "NonCompliantResourceCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            }
         },
         "GroupName": "string"
      }
   ],
   "GroupByKey": "string",
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregateComplianceCounts](#API_GetAggregateConfigRuleComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-response-AggregateComplianceCounts"></a>
Returns a list of AggregateComplianceCounts object.  
Type: Array of [AggregateComplianceCount](API_AggregateComplianceCount.md) objects

 ** [GroupByKey](#API_GetAggregateConfigRuleComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-response-GroupByKey"></a>
Groups the result based on ACCOUNT\$1ID or AWS\$1REGION.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

 ** [NextToken](#API_GetAggregateConfigRuleComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConfigRuleComplianceSummary-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetAggregateConfigRuleComplianceSummary) 

# GetAggregateConformancePackComplianceSummary


Returns the count of compliant and noncompliant conformance packs across all Amazon Web Services accounts and Amazon Web Services Regions in an aggregator. You can filter based on Amazon Web Services account ID or Amazon Web Services Region.

**Note**  
The results can return an empty result page, but if you have a nextToken, the results are displayed on the next page.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "AwsRegion": "string"
   },
   "GroupByKey": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_GetAggregateConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_GetAggregateConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-request-Filters"></a>
Filters the results based on the `AggregateConformancePackComplianceSummaryFilters` object.  
Type: [AggregateConformancePackComplianceSummaryFilters](API_AggregateConformancePackComplianceSummaryFilters.md) object  
Required: No

 ** [GroupByKey](#API_GetAggregateConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-request-GroupByKey"></a>
Groups the result based on Amazon Web Services account ID or Amazon Web Services Region.  
Type: String  
Valid Values: `ACCOUNT_ID | AWS_REGION`   
Required: No

 ** [Limit](#API_GetAggregateConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-request-Limit"></a>
The maximum number of results returned on each page. The default is maximum. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetAggregateConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "AggregateConformancePackComplianceSummaries": [ 
      { 
         "ComplianceSummary": { 
            "CompliantConformancePackCount": number,
            "NonCompliantConformancePackCount": number
         },
         "GroupName": "string"
      }
   ],
   "GroupByKey": "string",
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregateConformancePackComplianceSummaries](#API_GetAggregateConformancePackComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-response-AggregateConformancePackComplianceSummaries"></a>
Returns a list of `AggregateConformancePackComplianceSummary` object.  
Type: Array of [AggregateConformancePackComplianceSummary](API_AggregateConformancePackComplianceSummary.md) objects

 ** [GroupByKey](#API_GetAggregateConformancePackComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-response-GroupByKey"></a>
Groups the result based on Amazon Web Services account ID or Amazon Web Services Region.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

 ** [NextToken](#API_GetAggregateConformancePackComplianceSummary_ResponseSyntax) **   <a name="config-GetAggregateConformancePackComplianceSummary-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetAggregateConformancePackComplianceSummary) 

# GetAggregateDiscoveredResourceCounts


Returns the resource counts across accounts and regions that are present in your Amazon Config aggregator. You can request the resource counts by providing filters and GroupByKey.

For example, if the input contains accountID 12345678910 and region us-east-1 in filters, the API returns the count of resources in account ID 12345678910 and region us-east-1. If the input contains ACCOUNT\$1ID as a GroupByKey, the API returns resource counts for all source accounts that are present in your aggregator.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "Region": "string",
      "ResourceType": "string"
   },
   "GroupByKey": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_GetAggregateDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_GetAggregateDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-request-Filters"></a>
Filters the results based on the `ResourceCountFilters` object.  
Type: [ResourceCountFilters](API_ResourceCountFilters.md) object  
Required: No

 ** [GroupByKey](#API_GetAggregateDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-request-GroupByKey"></a>
The key to group the resource counts.  
Type: String  
Valid Values: `RESOURCE_TYPE | ACCOUNT_ID | AWS_REGION`   
Required: No

 ** [Limit](#API_GetAggregateDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-request-Limit"></a>
The maximum number of [GroupedResourceCount](API_GroupedResourceCount.md) objects returned on each page. The default is 1000. You cannot specify a number greater than 1000. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 1000.  
Required: No

 ** [NextToken](#API_GetAggregateDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

## Response Syntax


```
{
   "GroupByKey": "string",
   "GroupedResourceCounts": [ 
      { 
         "GroupName": "string",
         "ResourceCount": number
      }
   ],
   "NextToken": "string",
   "TotalDiscoveredResources": number
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [GroupByKey](#API_GetAggregateDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-response-GroupByKey"></a>
The key passed into the request object. If `GroupByKey` is not provided, the result will be empty.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

 ** [GroupedResourceCounts](#API_GetAggregateDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-response-GroupedResourceCounts"></a>
Returns a list of GroupedResourceCount objects.  
Type: Array of [GroupedResourceCount](API_GroupedResourceCount.md) objects

 ** [NextToken](#API_GetAggregateDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [TotalDiscoveredResources](#API_GetAggregateDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetAggregateDiscoveredResourceCounts-response-TotalDiscoveredResources"></a>
The total number of resources that are present in an aggregator with the filters that you provide.  
Type: Long

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetAggregateDiscoveredResourceCounts) 

# GetAggregateResourceConfig


Returns configuration item that is aggregated for your specific resource in a specific source account and region.

**Note**  
The API does not return results for deleted resources.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "ResourceIdentifier": { 
      "ResourceId": "string",
      "ResourceName": "string",
      "ResourceType": "string",
      "SourceAccountId": "string",
      "SourceRegion": "string"
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_GetAggregateResourceConfig_RequestSyntax) **   <a name="config-GetAggregateResourceConfig-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [ResourceIdentifier](#API_GetAggregateResourceConfig_RequestSyntax) **   <a name="config-GetAggregateResourceConfig-request-ResourceIdentifier"></a>
An object that identifies aggregate resource.  
Type: [AggregateResourceIdentifier](API_AggregateResourceIdentifier.md) object  
Required: Yes

## Response Syntax


```
{
   "ConfigurationItem": { 
      "accountId": "string",
      "arn": "string",
      "availabilityZone": "string",
      "awsRegion": "string",
      "configuration": "string",
      "configurationItemCaptureTime": number,
      "configurationItemDeliveryTime": number,
      "configurationItemMD5Hash": "string",
      "configurationItemStatus": "string",
      "configurationStateId": "string",
      "recordingFrequency": "string",
      "relatedEvents": [ "string" ],
      "relationships": [ 
         { 
            "relationshipName": "string",
            "resourceId": "string",
            "resourceName": "string",
            "resourceType": "string"
         }
      ],
      "resourceCreationTime": number,
      "resourceId": "string",
      "resourceName": "string",
      "resourceType": "string",
      "supplementaryConfiguration": { 
         "string" : "string" 
      },
      "tags": { 
         "string" : "string" 
      },
      "version": "string"
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationItem](#API_GetAggregateResourceConfig_ResponseSyntax) **   <a name="config-GetAggregateResourceConfig-response-ConfigurationItem"></a>
Returns a `ConfigurationItem` object.  
Type: [ConfigurationItem](API_ConfigurationItem.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** OversizedConfigurationItemException **   
The configuration item size is outside the allowable range.  
HTTP Status Code: 400

 ** ResourceNotDiscoveredException **   
You have specified a resource that is either unknown or has not been discovered.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetAggregateResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetAggregateResourceConfig) 

# GetComplianceDetailsByConfigRule


Returns the evaluation results for the specified Amazon Config rule. The results indicate which Amazon resources were evaluated by the rule, when each resource was last evaluated, and whether each resource complies with the rule.

## Request Syntax


```
{
   "ComplianceTypes": [ "string" ],
   "ConfigRuleName": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ComplianceTypes](#API_GetComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-request-ComplianceTypes"></a>
Filters the results by compliance.  
 `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned when an Amazon Config rule cannot be evaluated. However, `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for filtering results.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 3 items.  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA`   
Required: No

 ** [ConfigRuleName](#API_GetComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want compliance information.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

 ** [Limit](#API_GetComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-request-Limit"></a>
The maximum number of evaluation results returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetComplianceDetailsByConfigRule_RequestSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "EvaluationResults": [ 
      { 
         "Annotation": "string",
         "ComplianceType": "string",
         "ConfigRuleInvokedTime": number,
         "EvaluationResultIdentifier": { 
            "EvaluationResultQualifier": { 
               "ConfigRuleName": "string",
               "EvaluationMode": "string",
               "ResourceId": "string",
               "ResourceType": "string"
            },
            "OrderingTimestamp": number,
            "ResourceEvaluationId": "string"
         },
         "ResultRecordedTime": number,
         "ResultToken": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [EvaluationResults](#API_GetComplianceDetailsByConfigRule_ResponseSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-response-EvaluationResults"></a>
Indicates whether the Amazon resource complies with the specified Amazon Config rule.  
Type: Array of [EvaluationResult](API_EvaluationResult.md) objects

 ** [NextToken](#API_GetComplianceDetailsByConfigRule_ResponseSyntax) **   <a name="config-GetComplianceDetailsByConfigRule-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetComplianceDetailsByConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetComplianceDetailsByConfigRule) 

# GetComplianceDetailsByResource


Returns the evaluation results for the specified Amazon resource. The results indicate which Amazon Config rules were used to evaluate the resource, when each rule was last invoked, and whether the resource complies with each rule.

## Request Syntax


```
{
   "ComplianceTypes": [ "string" ],
   "NextToken": "string",
   "ResourceEvaluationId": "string",
   "ResourceId": "string",
   "ResourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ComplianceTypes](#API_GetComplianceDetailsByResource_RequestSyntax) **   <a name="config-GetComplianceDetailsByResource-request-ComplianceTypes"></a>
Filters the results by compliance.  
 `INSUFFICIENT_DATA` is a valid `ComplianceType` that is returned when an Amazon Config rule cannot be evaluated. However, `INSUFFICIENT_DATA` cannot be used as a `ComplianceType` for filtering results.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 3 items.  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA`   
Required: No

 ** [NextToken](#API_GetComplianceDetailsByResource_RequestSyntax) **   <a name="config-GetComplianceDetailsByResource-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [ResourceEvaluationId](#API_GetComplianceDetailsByResource_RequestSyntax) **   <a name="config-GetComplianceDetailsByResource-request-ResourceEvaluationId"></a>
The unique ID of Amazon resource execution for which you want to retrieve evaluation results.   
You need to only provide either a `ResourceEvaluationID` or a `ResourceID `and `ResourceType`.
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Required: No

 ** [ResourceId](#API_GetComplianceDetailsByResource_RequestSyntax) **   <a name="config-GetComplianceDetailsByResource-request-ResourceId"></a>
The ID of the Amazon resource for which you want compliance information.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: No

 ** [ResourceType](#API_GetComplianceDetailsByResource_RequestSyntax) **   <a name="config-GetComplianceDetailsByResource-request-ResourceType"></a>
The type of the Amazon resource for which you want compliance information.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "EvaluationResults": [ 
      { 
         "Annotation": "string",
         "ComplianceType": "string",
         "ConfigRuleInvokedTime": number,
         "EvaluationResultIdentifier": { 
            "EvaluationResultQualifier": { 
               "ConfigRuleName": "string",
               "EvaluationMode": "string",
               "ResourceId": "string",
               "ResourceType": "string"
            },
            "OrderingTimestamp": number,
            "ResourceEvaluationId": "string"
         },
         "ResultRecordedTime": number,
         "ResultToken": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [EvaluationResults](#API_GetComplianceDetailsByResource_ResponseSyntax) **   <a name="config-GetComplianceDetailsByResource-response-EvaluationResults"></a>
Indicates whether the specified Amazon resource complies each Amazon Config rule.  
Type: Array of [EvaluationResult](API_EvaluationResult.md) objects

 ** [NextToken](#API_GetComplianceDetailsByResource_ResponseSyntax) **   <a name="config-GetComplianceDetailsByResource-response-NextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetComplianceDetailsByResource) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetComplianceDetailsByResource) 

# GetComplianceSummaryByConfigRule


Returns the number of Amazon Config rules that are compliant and noncompliant, up to a maximum of 25 for each.

## Response Syntax


```
{
   "ComplianceSummary": { 
      "ComplianceSummaryTimestamp": number,
      "CompliantResourceCount": { 
         "CapExceeded": boolean,
         "CappedCount": number
      },
      "NonCompliantResourceCount": { 
         "CapExceeded": boolean,
         "CappedCount": number
      }
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ComplianceSummary](#API_GetComplianceSummaryByConfigRule_ResponseSyntax) **   <a name="config-GetComplianceSummaryByConfigRule-response-ComplianceSummary"></a>
The number of Amazon Config rules that are compliant and the number that are noncompliant, up to a maximum of 25 for each.  
Type: [ComplianceSummary](API_ComplianceSummary.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetComplianceSummaryByConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetComplianceSummaryByConfigRule) 

# GetComplianceSummaryByResourceType


Returns the number of resources that are compliant and the number that are noncompliant. You can specify one or more resource types to get these numbers for each resource type. The maximum number returned is 100.

## Request Syntax


```
{
   "ResourceTypes": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ResourceTypes](#API_GetComplianceSummaryByResourceType_RequestSyntax) **   <a name="config-GetComplianceSummaryByResourceType-request-ResourceTypes"></a>
Specify one or more resource types to get the number of resources that are compliant and the number that are noncompliant for each resource type.  
For this request, you can specify an Amazon resource type such as `AWS::EC2::Instance`. You can specify that the resource type is an Amazon Web Services account by specifying `AWS::::Account`.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 20 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "ComplianceSummariesByResourceType": [ 
      { 
         "ComplianceSummary": { 
            "ComplianceSummaryTimestamp": number,
            "CompliantResourceCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            },
            "NonCompliantResourceCount": { 
               "CapExceeded": boolean,
               "CappedCount": number
            }
         },
         "ResourceType": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ComplianceSummariesByResourceType](#API_GetComplianceSummaryByResourceType_ResponseSyntax) **   <a name="config-GetComplianceSummaryByResourceType-response-ComplianceSummariesByResourceType"></a>
The number of resources that are compliant and the number that are noncompliant. If one or more resource types were provided with the request, the numbers are returned for each resource type. The maximum number returned is 100.  
Type: Array of [ComplianceSummaryByResourceType](API_ComplianceSummaryByResourceType.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetComplianceSummaryByResourceType) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetComplianceSummaryByResourceType) 

# GetConformancePackComplianceDetails


Returns compliance details of a conformance pack for all Amazon resources that are monitered by conformance pack.

## Request Syntax


```
{
   "ConformancePackName": "string",
   "Filters": { 
      "ComplianceType": "string",
      "ConfigRuleNames": [ "string" ],
      "ResourceIds": [ "string" ],
      "ResourceType": "string"
   },
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackName](#API_GetConformancePackComplianceDetails_RequestSyntax) **   <a name="config-GetConformancePackComplianceDetails-request-ConformancePackName"></a>
Name of the conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

 ** [Filters](#API_GetConformancePackComplianceDetails_RequestSyntax) **   <a name="config-GetConformancePackComplianceDetails-request-Filters"></a>
A `ConformancePackEvaluationFilters` object.  
Type: [ConformancePackEvaluationFilters](API_ConformancePackEvaluationFilters.md) object  
Required: No

 ** [Limit](#API_GetConformancePackComplianceDetails_RequestSyntax) **   <a name="config-GetConformancePackComplianceDetails-request-Limit"></a>
The maximum number of evaluation results returned on each page. If you do no specify a number, Amazon Config uses the default. The default is 100.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetConformancePackComplianceDetails_RequestSyntax) **   <a name="config-GetConformancePackComplianceDetails-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConformancePackName": "string",
   "ConformancePackRuleEvaluationResults": [ 
      { 
         "Annotation": "string",
         "ComplianceType": "string",
         "ConfigRuleInvokedTime": number,
         "EvaluationResultIdentifier": { 
            "EvaluationResultQualifier": { 
               "ConfigRuleName": "string",
               "EvaluationMode": "string",
               "ResourceId": "string",
               "ResourceType": "string"
            },
            "OrderingTimestamp": number,
            "ResourceEvaluationId": "string"
         },
         "ResultRecordedTime": number
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackName](#API_GetConformancePackComplianceDetails_ResponseSyntax) **   <a name="config-GetConformancePackComplianceDetails-response-ConformancePackName"></a>
Name of the conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*` 

 ** [ConformancePackRuleEvaluationResults](#API_GetConformancePackComplianceDetails_ResponseSyntax) **   <a name="config-GetConformancePackComplianceDetails-response-ConformancePackRuleEvaluationResults"></a>
Returns a list of `ConformancePackEvaluationResult` objects.  
Type: Array of [ConformancePackEvaluationResult](API_ConformancePackEvaluationResult.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 100 items.

 ** [NextToken](#API_GetConformancePackComplianceDetails_ResponseSyntax) **   <a name="config-GetConformancePackComplianceDetails-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleInConformancePackException **   
 Amazon Config rule that you passed in the filter does not exist.  
HTTP Status Code: 400

 ** NoSuchConformancePackException **   
You specified one or more conformance packs that do not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetConformancePackComplianceDetails) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetConformancePackComplianceDetails) 

# GetConformancePackComplianceSummary


Returns compliance details for the conformance pack based on the cumulative compliance results of all the rules in that conformance pack.

## Request Syntax


```
{
   "ConformancePackNames": [ "string" ],
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackNames](#API_GetConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetConformancePackComplianceSummary-request-ConformancePackNames"></a>
Names of conformance packs.  
Type: Array of strings  
Array Members: Minimum number of 1 item. Maximum number of 5 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

 ** [Limit](#API_GetConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetConformancePackComplianceSummary-request-Limit"></a>
The maximum number of conformance packs returned on each page.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_GetConformancePackComplianceSummary_RequestSyntax) **   <a name="config-GetConformancePackComplianceSummary-request-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConformancePackComplianceSummaryList": [ 
      { 
         "ConformancePackComplianceStatus": "string",
         "ConformancePackName": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackComplianceSummaryList](#API_GetConformancePackComplianceSummary_ResponseSyntax) **   <a name="config-GetConformancePackComplianceSummary-response-ConformancePackComplianceSummaryList"></a>
A list of `ConformancePackComplianceSummary` objects.   
Type: Array of [ConformancePackComplianceSummary](API_ConformancePackComplianceSummary.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 5 items.

 ** [NextToken](#API_GetConformancePackComplianceSummary_ResponseSyntax) **   <a name="config-GetConformancePackComplianceSummary-response-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConformancePackException **   
You specified one or more conformance packs that do not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetConformancePackComplianceSummary) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetConformancePackComplianceSummary) 

# GetCustomRulePolicy


Returns the policy definition containing the logic for your Amazon Config Custom Policy rule.

## Request Syntax


```
{
   "ConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_GetCustomRulePolicy_RequestSyntax) **   <a name="config-GetCustomRulePolicy-request-ConfigRuleName"></a>
The name of your Amazon Config Custom Policy rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: No

## Response Syntax


```
{
   "PolicyText": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [PolicyText](#API_GetCustomRulePolicy_ResponseSyntax) **   <a name="config-GetCustomRulePolicy-response-PolicyText"></a>
The policy definition containing the logic for your Amazon Config Custom Policy rule.  
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 10000.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetCustomRulePolicy) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetCustomRulePolicy) 

# GetDiscoveredResourceCounts


Returns the resource types, the number of each resource type, and the total number of resources that Amazon Config is recording in this region for your Amazon Web Services account. 

**Example**

1.  Amazon Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets.

1. You make a call to the `GetDiscoveredResourceCounts` action and specify that you want all resource types. 

1.  Amazon Config returns the following:
   + The resource types (EC2 instances, IAM users, and S3 buckets).
   + The number of each resource type (25, 20, and 15).
   + The total number of all resources (60).

The response is paginated. By default, Amazon Config lists 100 [ResourceCount](API_ResourceCount.md) objects on each page. You can customize this number with the `limit` parameter. The response includes a `nextToken` string. To get the next page of results, run the request again and specify the string for the `nextToken` parameter.

**Note**  
If you make a call to the [GetDiscoveredResourceCounts](#API_GetDiscoveredResourceCounts) action, you might not immediately receive resource counts in the following situations:  
You are a new Amazon Config customer.
You just enabled resource recording.
It might take a few minutes for Amazon Config to record and count your resources. Wait a few minutes and then retry the [GetDiscoveredResourceCounts](#API_GetDiscoveredResourceCounts) action. 

## Request Syntax


```
{
   "limit": number,
   "nextToken": "string",
   "resourceTypes": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [limit](#API_GetDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetDiscoveredResourceCounts-request-limit"></a>
The maximum number of [ResourceCount](API_ResourceCount.md) objects returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [nextToken](#API_GetDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetDiscoveredResourceCounts-request-nextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [resourceTypes](#API_GetDiscoveredResourceCounts_RequestSyntax) **   <a name="config-GetDiscoveredResourceCounts-request-resourceTypes"></a>
The comma-separated list that specifies the resource types that you want Amazon Config to return (for example, `"AWS::EC2::Instance"`, `"AWS::IAM::User"`).  
If a value for `resourceTypes` is not specified, Amazon Config returns all resource types that Amazon Config is recording in the region for your account.  
If the configuration recorder is turned off, Amazon Config returns an empty list of [ResourceCount](API_ResourceCount.md) objects. If the configuration recorder is not recording a specific resource type (for example, S3 buckets), that resource type is not returned in the list of [ResourceCount](API_ResourceCount.md) objects.
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 20 items.  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: No

## Response Syntax


```
{
   "nextToken": "string",
   "resourceCounts": [ 
      { 
         "count": number,
         "resourceType": "string"
      }
   ],
   "totalDiscoveredResources": number
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [nextToken](#API_GetDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetDiscoveredResourceCounts-response-nextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

 ** [resourceCounts](#API_GetDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetDiscoveredResourceCounts-response-resourceCounts"></a>
The list of `ResourceCount` objects. Each object is listed in descending order by the number of resources.  
Type: Array of [ResourceCount](API_ResourceCount.md) objects

 ** [totalDiscoveredResources](#API_GetDiscoveredResourceCounts_ResponseSyntax) **   <a name="config-GetDiscoveredResourceCounts-response-totalDiscoveredResources"></a>
The total number of resources that Amazon Config is recording in the region for your account. If you specify resource types in the request, Amazon Config returns only the total number of resources for those resource types.  

**Example**

1.  Amazon Config is recording three resource types in the US East (Ohio) Region for your account: 25 EC2 instances, 20 IAM users, and 15 S3 buckets, for a total of 60 resources.

1. You make a call to the `GetDiscoveredResourceCounts` action and specify the resource type, `"AWS::EC2::Instances"`, in the request.

1.  Amazon Config returns 25 for `totalDiscoveredResources`.
Type: Long

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetDiscoveredResourceCounts) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetDiscoveredResourceCounts) 

# GetOrganizationConfigRuleDetailedStatus


Returns detailed status for each member account within an organization for a given organization Amazon Config rule.

## Request Syntax


```
{
   "Filters": { 
      "AccountId": "string",
      "MemberAccountRuleStatus": "string"
   },
   "Limit": number,
   "NextToken": "string",
   "OrganizationConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Filters](#API_GetOrganizationConfigRuleDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-request-Filters"></a>
A `StatusDetailFilters` object.  
Type: [StatusDetailFilters](API_StatusDetailFilters.md) object  
Required: No

 ** [Limit](#API_GetOrganizationConfigRuleDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-request-Limit"></a>
The maximum number of `OrganizationConfigRuleDetailedStatus` returned on each page. If you do not specify a number, Amazon Config uses the default. The default is 100.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetOrganizationConfigRuleDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [OrganizationConfigRuleName](#API_GetOrganizationConfigRuleDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-request-OrganizationConfigRuleName"></a>
The name of your organization Amazon Config rule for which you want status details for member accounts.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `[A-Za-z0-9-_]+`   
Required: Yes

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConfigRuleDetailedStatus": [ 
      { 
         "AccountId": "string",
         "ConfigRuleName": "string",
         "ErrorCode": "string",
         "ErrorMessage": "string",
         "LastUpdateTime": number,
         "MemberAccountRuleStatus": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_GetOrganizationConfigRuleDetailedStatus_ResponseSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [OrganizationConfigRuleDetailedStatus](#API_GetOrganizationConfigRuleDetailedStatus_ResponseSyntax) **   <a name="config-GetOrganizationConfigRuleDetailedStatus-response-OrganizationConfigRuleDetailedStatus"></a>
A list of `MemberAccountStatus` objects.  
Type: Array of [MemberAccountStatus](API_MemberAccountStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an organization Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetOrganizationConfigRuleDetailedStatus) 

# GetOrganizationConformancePackDetailedStatus


Returns detailed status for each member account within an organization for a given organization conformance pack.

## Request Syntax


```
{
   "Filters": { 
      "AccountId": "string",
      "Status": "string"
   },
   "Limit": number,
   "NextToken": "string",
   "OrganizationConformancePackName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Filters](#API_GetOrganizationConformancePackDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-request-Filters"></a>
An `OrganizationResourceDetailedStatusFilters` object.  
Type: [OrganizationResourceDetailedStatusFilters](API_OrganizationResourceDetailedStatusFilters.md) object  
Required: No

 ** [Limit](#API_GetOrganizationConformancePackDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-request-Limit"></a>
The maximum number of `OrganizationConformancePackDetailedStatuses` returned on each page. If you do not specify a number, Amazon Config uses the default. The default is 100.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_GetOrganizationConformancePackDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-request-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [OrganizationConformancePackName](#API_GetOrganizationConformancePackDetailedStatus_RequestSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-request-OrganizationConformancePackName"></a>
The name of organization conformance pack for which you want status details for member accounts.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

## Response Syntax


```
{
   "NextToken": "string",
   "OrganizationConformancePackDetailedStatuses": [ 
      { 
         "AccountId": "string",
         "ConformancePackName": "string",
         "ErrorCode": "string",
         "ErrorMessage": "string",
         "LastUpdateTime": number,
         "Status": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_GetOrganizationConformancePackDetailedStatus_ResponseSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-response-NextToken"></a>
The nextToken string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [OrganizationConformancePackDetailedStatuses](#API_GetOrganizationConformancePackDetailedStatus_ResponseSyntax) **   <a name="config-GetOrganizationConformancePackDetailedStatus-response-OrganizationConformancePackDetailedStatuses"></a>
A list of `OrganizationConformancePackDetailedStatus` objects.   
Type: Array of [OrganizationConformancePackDetailedStatus](API_OrganizationConformancePackDetailedStatus.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchOrganizationConformancePackException **   
 Amazon Config organization conformance pack that you passed in the filter does not exist.  
For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetOrganizationConformancePackDetailedStatus) 

# GetOrganizationCustomRulePolicy


Returns the policy definition containing the logic for your organization Amazon Config Custom Policy rule.

## Request Syntax


```
{
   "OrganizationConfigRuleName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [OrganizationConfigRuleName](#API_GetOrganizationCustomRulePolicy_RequestSyntax) **   <a name="config-GetOrganizationCustomRulePolicy-request-OrganizationConfigRuleName"></a>
The name of your organization Amazon Config Custom Policy rule.   
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `[A-Za-z0-9-_]+`   
Required: Yes

## Response Syntax


```
{
   "PolicyText": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [PolicyText](#API_GetOrganizationCustomRulePolicy_ResponseSyntax) **   <a name="config-GetOrganizationCustomRulePolicy-response-PolicyText"></a>
The policy definition containing the logic for your organization Amazon Config Custom Policy rule.  
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 10000.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** NoSuchOrganizationConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an organization Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetOrganizationCustomRulePolicy) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetOrganizationCustomRulePolicy) 

# GetResourceConfigHistory


**Important**  
For accurate reporting on the compliance status, you must record the `AWS::Config::ResourceCompliance` resource type.  
For more information, see [Recording Amazon Resources](https://docs.amazonaws.cn/config/latest/developerguide/select-resources.html) in the * Amazon Config Resources Developer Guide*.

Returns a list of configurations items (CIs) for the specified resource.

 **Contents** 

The list contains details about each state of the resource during the specified time interval. If you specified a retention period to retain your CIs between a minimum of 30 days and a maximum of 7 years (2557 days), Amazon Config returns the CIs for the specified retention period. 

 **Pagination** 

The response is paginated. By default, Amazon Config returns a limit of 10 configuration items per page. You can customize this number with the `limit` parameter. The response includes a `nextToken` string. To get the next page of results, run the request again and specify the string for the `nextToken` parameter.

**Note**  
Each call to the API is limited to span a duration of seven days. It is likely that the number of records returned is smaller than the specified `limit`. In such cases, you can make another call, using the `nextToken`.

## Request Syntax


```
{
   "chronologicalOrder": "string",
   "earlierTime": number,
   "laterTime": number,
   "limit": number,
   "nextToken": "string",
   "resourceId": "string",
   "resourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [chronologicalOrder](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-chronologicalOrder"></a>
The chronological order for configuration items listed. By default, the results are listed in reverse chronological order.  
Type: String  
Valid Values: `Reverse | Forward`   
Required: No

 ** [earlierTime](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-earlierTime"></a>
The chronologically earliest time in the time range for which the history requested. If not specified, the action returns paginated results that contain configuration items that start when the first configuration item was recorded.  
Type: Timestamp  
Required: No

 ** [laterTime](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-laterTime"></a>
The chronologically latest time in the time range for which the history requested. If not specified, current time is taken.  
Type: Timestamp  
Required: No

 ** [limit](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-limit"></a>
The maximum number of configuration items returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [nextToken](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-nextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [resourceId](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-resourceId"></a>
The ID of the resource (for example., `sg-xxxxxx`).  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: Yes

 ** [resourceType](#API_GetResourceConfigHistory_RequestSyntax) **   <a name="config-GetResourceConfigHistory-request-resourceType"></a>
The resource type.  
Type: String  
Valid Values: `AWS::EC2::CustomerGateway | AWS::EC2::EIP | AWS::EC2::Host | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInterface | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::Subnet | AWS::CloudTrail::Trail | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::EC2::RegisteredHAInstance | AWS::EC2::NatGateway | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::FlowLog | AWS::EC2::VPCPeeringConnection | AWS::Elasticsearch::Domain | AWS::IAM::Group | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::User | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::ACM::Certificate | AWS::RDS::DBInstance | AWS::RDS::DBSubnetGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBCluster | AWS::RDS::DBClusterSnapshot | AWS::RDS::EventSubscription | AWS::S3::Bucket | AWS::S3::AccountPublicAccessBlock | AWS::Redshift::Cluster | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::SSM::ManagedInstanceInventory | AWS::CloudWatch::Alarm | AWS::CloudFormation::Stack | AWS::ElasticLoadBalancing::LoadBalancer | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::DynamoDB::Table | AWS::CodeBuild::Project | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::Lambda::Function | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::RuleGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::WAFv2::WebACL | AWS::WAFv2::RuleGroup | AWS::WAFv2::IPSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::ManagedRuleSet | AWS::XRay::EncryptionConfig | AWS::SSM::AssociationCompliance | AWS::SSM::PatchCompliance | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::ApiGateway::Stage | AWS::ApiGateway::RestApi | AWS::ApiGatewayV2::Stage | AWS::ApiGatewayV2::Api | AWS::CodePipeline::Pipeline | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::Portfolio | AWS::SQS::Queue | AWS::KMS::Key | AWS::QLDB::Ledger | AWS::SecretsManager::Secret | AWS::SNS::Topic | AWS::SSM::FileData | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::ECR::Repository | AWS::ECS::Cluster | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EKS::Cluster | AWS::OpenSearch::Domain | AWS::EC2::TransitGateway | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::EC2::LaunchTemplate | AWS::ECR::PublicRepository | AWS::GuardDuty::Detector | AWS::EMR::SecurityConfiguration | AWS::SageMaker::CodeRepository | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::EventSubscription | AWS::MSK::Cluster | AWS::StepFunctions::Activity | AWS::WorkSpaces::Workspace | AWS::WorkSpaces::ConnectionAlias | AWS::SageMaker::Model | AWS::ElasticLoadBalancingV2::Listener | AWS::StepFunctions::StateMachine | AWS::Batch::JobQueue | AWS::Batch::ComputeEnvironment | AWS::AccessAnalyzer::Analyzer | AWS::Athena::WorkGroup | AWS::Athena::DataCatalog | AWS::Detective::Graph | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayRouteTable | AWS::DMS::Certificate | AWS::AppConfig::Application | AWS::AppSync::GraphQLApi | AWS::DataSync::LocationSMB | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationS3 | AWS::DataSync::LocationEFS | AWS::DataSync::Task | AWS::DataSync::LocationNFS | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EKS::FargateProfile | AWS::Glue::Job | AWS::GuardDuty::ThreatIntelSet | AWS::GuardDuty::IPSet | AWS::SageMaker::Workteam | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::ServiceDiscovery::Service | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::SES::ContactList | AWS::SES::ConfigurationSet | AWS::Route53::HostedZone | AWS::IoTEvents::Input | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::AlarmModel | AWS::ServiceDiscovery::HttpNamespace | AWS::Events::EventBus | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::InfrastructureConfiguration | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationHDFS | AWS::Glue::Classifier | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::ECR::RegistryPolicy | AWS::Backup::ReportPlan | AWS::Lightsail::Certificate | AWS::RUM::AppMonitor | AWS::Events::Endpoint | AWS::SES::ReceiptRuleSet | AWS::Events::Archive | AWS::Events::ApiDestination | AWS::Lightsail::Disk | AWS::FIS::ExperimentTemplate | AWS::DataSync::LocationFSxWindows | AWS::SES::ReceiptFilter | AWS::GuardDuty::Filter | AWS::SES::Template | AWS::AmazonMQ::Broker | AWS::AppConfig::Environment | AWS::AppConfig::ConfigurationProfile | AWS::Cloud9::EnvironmentEC2 | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Discoverer | AWS::FraudDetector::Label | AWS::FraudDetector::EntityType | AWS::FraudDetector::Variable | AWS::FraudDetector::Outcome | AWS::IoT::Authorizer | AWS::IoT::SecurityProfile | AWS::IoT::RoleAlias | AWS::IoT::Dimension | AWS::IoTAnalytics::Datastore | AWS::Lightsail::Bucket | AWS::Lightsail::StaticIp | AWS::MediaPackage::PackagingGroup | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::ResilienceHub::ResiliencyPolicy | AWS::Transfer::Workflow | AWS::EKS::IdentityProviderConfig | AWS::EKS::Addon | AWS::Glue::MLTransform | AWS::IoT::Policy | AWS::IoT::MitigationAction | AWS::IoTTwinMaker::Workspace | AWS::IoTTwinMaker::Entity | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Pipeline | AWS::IoTAnalytics::Channel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Project | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::AssetModel | AWS::IVS::Channel | AWS::IVS::RecordingConfiguration | AWS::IVS::PlaybackKeyPair | AWS::KinesisAnalyticsV2::Application | AWS::RDS::GlobalCluster | AWS::S3::MultiRegionAccessPoint | AWS::DeviceFarm::TestGridProject | AWS::Budgets::BudgetsAction | AWS::Lex::Bot | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::IoT::CustomMetric | AWS::Route53Resolver::FirewallDomainList | AWS::RoboMaker::RobotApplicationVersion | AWS::EC2::TrafficMirrorSession | AWS::IoTSiteWise::Gateway | AWS::Lex::BotAlias | AWS::LookoutMetrics::Alert | AWS::IoT::AccountAuditConfiguration | AWS::EC2::TrafficMirrorTarget | AWS::S3::StorageLens | AWS::IoT::ScheduledAudit | AWS::Events::Connection | AWS::EventSchemas::Schema | AWS::MediaPackage::PackagingConfiguration | AWS::KinesisVideo::SignalingChannel | AWS::AppStream::DirectoryConfig | AWS::LookoutVision::Project | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryReadiness::ResourceSet | AWS::RoboMaker::SimulationApplication | AWS::RoboMaker::RobotApplication | AWS::HealthLake::FHIRDatastore | AWS::Pinpoint::Segment | AWS::Pinpoint::ApplicationSettings | AWS::Events::Rule | AWS::EC2::DHCPOptions | AWS::EC2::NetworkInsightsPath | AWS::EC2::TrafficMirrorFilter | AWS::EC2::IPAM | AWS::IoTTwinMaker::Scene | AWS::NetworkManager::TransitGatewayRegistration | AWS::CustomerProfiles::Domain | AWS::AutoScaling::WarmPool | AWS::Connect::PhoneNumber | AWS::AppConfig::DeploymentStrategy | AWS::AppFlow::Flow | AWS::AuditManager::Assessment | AWS::CloudWatch::MetricStream | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::EC2::EC2Fleet | AWS::EC2::SubnetRouteTableAssociation | AWS::ECR::PullThroughCacheRule | AWS::GroundStation::Config | AWS::ImageBuilder::ImagePipeline | AWS::IoT::FleetMetric | AWS::IoTWireless::ServiceProfile | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::Site | AWS::Panorama::Package | AWS::Pinpoint::App | AWS::Redshift::ScheduledAction | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::SageMaker::AppImageConfig | AWS::SageMaker::Image | AWS::ECS::TaskSet | AWS::Cassandra::Keyspace | AWS::Signer::SigningProfile | AWS::Amplify::App | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualService | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::CodeArtifact::Repository | AWS::EC2::PrefixList | AWS::EC2::SpotFleet | AWS::Evidently::Project | AWS::Forecast::Dataset | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::Pinpoint::Campaign | AWS::Pinpoint::InAppTemplate | AWS::SageMaker::Domain | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::KinesisFirehose::DeliveryStream | AWS::Amplify::Branch | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::Route | AWS::Athena::PreparedStatement | AWS::EC2::IPAMScope | AWS::Evidently::Launch | AWS::Forecast::DatasetGroup | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::MissionProfile | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaTailor::PlaybackConfiguration | AWS::MSK::Configuration | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::ResilienceHub::App | AWS::ACMPCA::CertificateAuthority | AWS::AppConfig::HostedConfigurationVersion | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualRouter | AWS::AppRunner::Service | AWS::CustomerProfiles::ObjectType | AWS::DMS::Endpoint | AWS::EC2::CapacityReservation | AWS::EC2::ClientVpnEndpoint | AWS::Kendra::Index | AWS::KinesisVideo::Stream | AWS::Logs::Destination | AWS::Pinpoint::EmailChannel | AWS::S3::AccessPoint | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::LinkAssociation | AWS::IoTWireless::MulticastGroup | AWS::Personalize::DatasetGroup | AWS::IoTTwinMaker::ComponentType | AWS::CodeBuild::ReportGroup | AWS::SageMaker::FeatureGroup | AWS::MSK::BatchScramSecret | AWS::AppStream::Stack | AWS::IoT::JobTemplate | AWS::IoTWireless::FuotaTask | AWS::IoT::ProvisioningTemplate | AWS::InspectorV2::Filter | AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation | AWS::ServiceDiscovery::Instance | AWS::Transfer::Certificate | AWS::MediaConnect::FlowSource | AWS::APS::RuleGroupsNamespace | AWS::CodeGuruProfiler::ProfilingGroup | AWS::Route53Resolver::ResolverQueryLoggingConfig | AWS::Batch::SchedulingPolicy | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::Connect::Instance | AWS::Connect::QuickConnect | AWS::EC2::CarrierGateway | AWS::EC2::IPAMPool | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::ECS::CapacityProvider | AWS::IAM::InstanceProfile | AWS::IoT::CACertificate | AWS::IoTTwinMaker::SyncJob | AWS::KafkaConnect::Connector | AWS::Lambda::CodeSigningConfig | AWS::NetworkManager::ConnectPeer | AWS::ResourceExplorer2::Index | AWS::AppStream::Fleet | AWS::Cognito::UserPool | AWS::Cognito::UserPoolClient | AWS::Cognito::UserPoolGroup | AWS::EC2::NetworkInsightsAccessScope | AWS::EC2::NetworkInsightsAnalysis | AWS::Grafana::Workspace | AWS::GroundStation::DataflowEndpointGroup | AWS::ImageBuilder::ImageRecipe | AWS::KMS::Alias | AWS::M2::Environment | AWS::QuickSight::DataSource | AWS::QuickSight::Template | AWS::QuickSight::Theme | AWS::RDS::OptionGroup | AWS::Redshift::EndpointAccess | AWS::Route53Resolver::FirewallRuleGroup | AWS::SSM::Document`   
Required: Yes

## Response Syntax


```
{
   "configurationItems": [ 
      { 
         "accountId": "string",
         "arn": "string",
         "availabilityZone": "string",
         "awsRegion": "string",
         "configuration": "string",
         "configurationItemCaptureTime": number,
         "configurationItemDeliveryTime": number,
         "configurationItemMD5Hash": "string",
         "configurationItemStatus": "string",
         "configurationStateId": "string",
         "recordingFrequency": "string",
         "relatedEvents": [ "string" ],
         "relationships": [ 
            { 
               "relationshipName": "string",
               "resourceId": "string",
               "resourceName": "string",
               "resourceType": "string"
            }
         ],
         "resourceCreationTime": number,
         "resourceId": "string",
         "resourceName": "string",
         "resourceType": "string",
         "supplementaryConfiguration": { 
            "string" : "string" 
         },
         "tags": { 
            "string" : "string" 
         },
         "version": "string"
      }
   ],
   "nextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [configurationItems](#API_GetResourceConfigHistory_ResponseSyntax) **   <a name="config-GetResourceConfigHistory-response-configurationItems"></a>
An array of `ConfigurationItems` Objects. Contatins the configuration history for one or more resources.  
Type: Array of [ConfigurationItem](API_ConfigurationItem.md) objects

 ** [nextToken](#API_GetResourceConfigHistory_ResponseSyntax) **   <a name="config-GetResourceConfigHistory-response-nextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidTimeRangeException **   
The specified time range is not valid. The earlier time is not chronologically before the later time.  
HTTP Status Code: 400

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** ResourceNotDiscoveredException **   
You have specified a resource that is either unknown or has not been discovered.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## Examples


### How to access the contents for configuration: Amazon S3 bucket


This example illustrates one usage of GetResourceConfigHistory.

```
import boto3
import json

def handle_configuration(configuration_item):
    """
    Example of handling the configuration field from get_resource_config_history
    """
    # The configuration is a JSON-encoded string
    raw_configuration = configuration_item['configuration']
    print(f"Raw configuration: {raw_configuration}")
    
    # Deserialize the configuration string to access its attributes
    configuration = json.loads(raw_configuration)
    
    # Now you can access configuration attributes
    bucket_name = configuration['name']
    owner_id = configuration['owner']['id']
    creation_date = configuration['creationDate']
    region = configuration['region']
    
    print(f"Bucket Name: {bucket_name}")
    print(f"Owner ID: {owner_id}")
    print(f"Creation Date: {creation_date}")
    print(f"Region: {region}")
```

### How to access the contents for supplementaryConfiguration: Amazon S3 bucket


This example illustrates one usage of GetResourceConfigHistory.

```
import boto3
import json

def handle_supplementary_configuration(configuration_item):
    """
    Example of handling the supplementaryConfiguration field from get_resource_config_history
    """
    supplementary_config = configuration_item['supplementaryConfiguration']
    
    # Handle ServerSideEncryptionConfiguration
    sse_config = json.loads(supplementary_config['ServerSideEncryptionConfiguration'])
    encryption_rules = sse_config['rules']
    
    # Handle AccessControlList (double-encoded)
    acl_string = supplementary_config['AccessControlList']
    acl = json.loads(json.loads(acl_string))  # Note: double json.loads for double-encoded strings
    
    # Handle BucketPolicy
    bucket_policy = json.loads(supplementary_config['BucketPolicy'])
    
    print("Encryption Rules:", encryption_rules)
    print("ACL Grant List:", acl['grantList'])
    print("Bucket Policy:", bucket_policy)
    
    # Handle other supplementary configurations
    public_access = json.loads(supplementary_config['PublicAccessBlockConfiguration'])
    print("Public Access Block Configuration:", public_access)
```

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetResourceConfigHistory) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetResourceConfigHistory) 

# GetResourceEvaluationSummary


Returns a summary of resource evaluation for the specified resource evaluation ID from the proactive rules that were run. The results indicate which evaluation context was used to evaluate the rules, which resource details were evaluated, the evaluation mode that was run, and whether the resource details comply with the configuration of the proactive rules. 

**Note**  
To see additional information about the evaluation result, such as which rule flagged a resource as NON\$1COMPLIANT, use the [GetComplianceDetailsByResource](https://docs.amazonaws.cn/config/latest/APIReference/API_GetComplianceDetailsByResource.html) API. For more information, see the [Examples](https://docs.amazonaws.cn/config/latest/APIReference/API_GetResourceEvaluationSummary.html#API_GetResourceEvaluationSummary_Examples) section.

## Request Syntax


```
{
   "ResourceEvaluationId": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ResourceEvaluationId](#API_GetResourceEvaluationSummary_RequestSyntax) **   <a name="config-GetResourceEvaluationSummary-request-ResourceEvaluationId"></a>
The unique `ResourceEvaluationId` of Amazon resource execution for which you want to retrieve the evaluation summary.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Required: Yes

## Response Syntax


```
{
   "Compliance": "string",
   "EvaluationContext": { 
      "EvaluationContextIdentifier": "string"
   },
   "EvaluationMode": "string",
   "EvaluationStartTimestamp": number,
   "EvaluationStatus": { 
      "FailureReason": "string",
      "Status": "string"
   },
   "ResourceDetails": { 
      "ResourceConfiguration": "string",
      "ResourceConfigurationSchemaType": "string",
      "ResourceId": "string",
      "ResourceType": "string"
   },
   "ResourceEvaluationId": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [Compliance](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-Compliance"></a>
The compliance status of the resource evaluation summary.  
Type: String  
Valid Values: `COMPLIANT | NON_COMPLIANT | NOT_APPLICABLE | INSUFFICIENT_DATA` 

 ** [EvaluationContext](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-EvaluationContext"></a>
Returns an `EvaluationContext` object.  
Type: [EvaluationContext](API_EvaluationContext.md) object

 ** [EvaluationMode](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-EvaluationMode"></a>
Lists results of the mode that you requested to retrieve the resource evaluation summary. The valid values are Detective or Proactive.  
Type: String  
Valid Values: `DETECTIVE | PROACTIVE` 

 ** [EvaluationStartTimestamp](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-EvaluationStartTimestamp"></a>
The start timestamp when Amazon Config rule starts evaluating compliance for the provided resource details.  
Type: Timestamp

 ** [EvaluationStatus](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-EvaluationStatus"></a>
Returns an `EvaluationStatus` object.  
Type: [EvaluationStatus](API_EvaluationStatus.md) object

 ** [ResourceDetails](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-ResourceDetails"></a>
Returns a `ResourceDetails` object.  
Type: [ResourceDetails](API_ResourceDetails.md) object

 ** [ResourceEvaluationId](#API_GetResourceEvaluationSummary_ResponseSyntax) **   <a name="config-GetResourceEvaluationSummary-response-ResourceEvaluationId"></a>
The unique `ResourceEvaluationId` of Amazon resource execution for which you want to retrieve the evaluation summary.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

## Examples


### Example


To see additional information about the evaluation result, such as which rule flagged a resource as NON\$1COMPLIANT, use the [GetComplianceDetailsByResource](https://docs.amazonaws.cn/config/latest/APIReference/API_GetComplianceDetailsByResource.html) API. For example:

```
aws configservice get-compliance-details-by-resource --resource-evaluation-id MY-EVALUATION-ID
{
	"EvaluationResults": [
		{
			"EvaluationResultIdentifier": {
				"EvaluationResultQualifier": {
					"ConfigRuleName": "s3-bucket-logging-enabled",
					"ResourceType": "AWS::S3::Bucket",
					"ResourceId": "MY-RESOURCE-ID",
					"EvaluationMode": "PROACTIVE"
				},
				"OrderingTimestamp": "2022-12-23T14:35:40.036000-05:00",
				"ResourceEvaluationId": "MY-EVALUATION-ID"
			},
			"ComplianceType": "NON_COMPLIANT",
			"ResultRecordedTime": "2022-12-23T14:35:11.213000-05:00",
			"ConfigRuleInvokedTime": "2022-12-23T14:35:10.978000-05:00"
		}
	]
}
```

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetResourceEvaluationSummary) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetResourceEvaluationSummary) 

# GetStoredQuery


Returns the details of a specific stored query.

## Request Syntax


```
{
   "QueryName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [QueryName](#API_GetStoredQuery_RequestSyntax) **   <a name="config-GetStoredQuery-request-QueryName"></a>
The name of the query.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `^[a-zA-Z0-9-_]+$`   
Required: Yes

## Response Syntax


```
{
   "StoredQuery": { 
      "Description": "string",
      "Expression": "string",
      "QueryArn": "string",
      "QueryId": "string",
      "QueryName": "string"
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [StoredQuery](#API_GetStoredQuery_ResponseSyntax) **   <a name="config-GetStoredQuery-response-StoredQuery"></a>
Returns a `StoredQuery` object.  
Type: [StoredQuery](API_StoredQuery.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/GetStoredQuery) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/GetStoredQuery) 

# ListAggregateDiscoveredResources


Accepts a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions. A resource identifier includes the resource type, ID, (if available) the custom resource name, source account, and source region. You can narrow the results to include only resources that have specific resource IDs, or a resource name, or source account ID, or source region.

For example, if the input consists of accountID 12345678910 and the region is us-east-1 for resource type `AWS::EC2::Instance` then the API returns all the EC2 instance identifiers of accountID 12345678910 and region us-east-1.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Filters": { 
      "AccountId": "string",
      "Region": "string",
      "ResourceId": "string",
      "ResourceName": "string"
   },
   "Limit": number,
   "NextToken": "string",
   "ResourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_ListAggregateDiscoveredResources_RequestSyntax) **   <a name="config-ListAggregateDiscoveredResources-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.   
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Filters](#API_ListAggregateDiscoveredResources_RequestSyntax) **   <a name="config-ListAggregateDiscoveredResources-request-Filters"></a>
Filters the results based on the `ResourceFilters` object.  
Type: [ResourceFilters](API_ResourceFilters.md) object  
Required: No

 ** [Limit](#API_ListAggregateDiscoveredResources_RequestSyntax) **   <a name="config-ListAggregateDiscoveredResources-request-Limit"></a>
The maximum number of resource identifiers returned on each page. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_ListAggregateDiscoveredResources_RequestSyntax) **   <a name="config-ListAggregateDiscoveredResources-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [ResourceType](#API_ListAggregateDiscoveredResources_RequestSyntax) **   <a name="config-ListAggregateDiscoveredResources-request-ResourceType"></a>
The type of resources that you want Amazon Config to list in the response.  
Type: String  
Valid Values: `AWS::EC2::CustomerGateway | AWS::EC2::EIP | AWS::EC2::Host | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInterface | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::Subnet | AWS::CloudTrail::Trail | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::EC2::RegisteredHAInstance | AWS::EC2::NatGateway | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::FlowLog | AWS::EC2::VPCPeeringConnection | AWS::Elasticsearch::Domain | AWS::IAM::Group | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::User | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::ACM::Certificate | AWS::RDS::DBInstance | AWS::RDS::DBSubnetGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBCluster | AWS::RDS::DBClusterSnapshot | AWS::RDS::EventSubscription | AWS::S3::Bucket | AWS::S3::AccountPublicAccessBlock | AWS::Redshift::Cluster | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::SSM::ManagedInstanceInventory | AWS::CloudWatch::Alarm | AWS::CloudFormation::Stack | AWS::ElasticLoadBalancing::LoadBalancer | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::DynamoDB::Table | AWS::CodeBuild::Project | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::Lambda::Function | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::RuleGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::WAFv2::WebACL | AWS::WAFv2::RuleGroup | AWS::WAFv2::IPSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::ManagedRuleSet | AWS::XRay::EncryptionConfig | AWS::SSM::AssociationCompliance | AWS::SSM::PatchCompliance | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::ApiGateway::Stage | AWS::ApiGateway::RestApi | AWS::ApiGatewayV2::Stage | AWS::ApiGatewayV2::Api | AWS::CodePipeline::Pipeline | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::Portfolio | AWS::SQS::Queue | AWS::KMS::Key | AWS::QLDB::Ledger | AWS::SecretsManager::Secret | AWS::SNS::Topic | AWS::SSM::FileData | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::ECR::Repository | AWS::ECS::Cluster | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EKS::Cluster | AWS::OpenSearch::Domain | AWS::EC2::TransitGateway | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::EC2::LaunchTemplate | AWS::ECR::PublicRepository | AWS::GuardDuty::Detector | AWS::EMR::SecurityConfiguration | AWS::SageMaker::CodeRepository | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::EventSubscription | AWS::MSK::Cluster | AWS::StepFunctions::Activity | AWS::WorkSpaces::Workspace | AWS::WorkSpaces::ConnectionAlias | AWS::SageMaker::Model | AWS::ElasticLoadBalancingV2::Listener | AWS::StepFunctions::StateMachine | AWS::Batch::JobQueue | AWS::Batch::ComputeEnvironment | AWS::AccessAnalyzer::Analyzer | AWS::Athena::WorkGroup | AWS::Athena::DataCatalog | AWS::Detective::Graph | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayRouteTable | AWS::DMS::Certificate | AWS::AppConfig::Application | AWS::AppSync::GraphQLApi | AWS::DataSync::LocationSMB | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationS3 | AWS::DataSync::LocationEFS | AWS::DataSync::Task | AWS::DataSync::LocationNFS | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EKS::FargateProfile | AWS::Glue::Job | AWS::GuardDuty::ThreatIntelSet | AWS::GuardDuty::IPSet | AWS::SageMaker::Workteam | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::ServiceDiscovery::Service | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::SES::ContactList | AWS::SES::ConfigurationSet | AWS::Route53::HostedZone | AWS::IoTEvents::Input | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::AlarmModel | AWS::ServiceDiscovery::HttpNamespace | AWS::Events::EventBus | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::InfrastructureConfiguration | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationHDFS | AWS::Glue::Classifier | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::ECR::RegistryPolicy | AWS::Backup::ReportPlan | AWS::Lightsail::Certificate | AWS::RUM::AppMonitor | AWS::Events::Endpoint | AWS::SES::ReceiptRuleSet | AWS::Events::Archive | AWS::Events::ApiDestination | AWS::Lightsail::Disk | AWS::FIS::ExperimentTemplate | AWS::DataSync::LocationFSxWindows | AWS::SES::ReceiptFilter | AWS::GuardDuty::Filter | AWS::SES::Template | AWS::AmazonMQ::Broker | AWS::AppConfig::Environment | AWS::AppConfig::ConfigurationProfile | AWS::Cloud9::EnvironmentEC2 | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Discoverer | AWS::FraudDetector::Label | AWS::FraudDetector::EntityType | AWS::FraudDetector::Variable | AWS::FraudDetector::Outcome | AWS::IoT::Authorizer | AWS::IoT::SecurityProfile | AWS::IoT::RoleAlias | AWS::IoT::Dimension | AWS::IoTAnalytics::Datastore | AWS::Lightsail::Bucket | AWS::Lightsail::StaticIp | AWS::MediaPackage::PackagingGroup | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::ResilienceHub::ResiliencyPolicy | AWS::Transfer::Workflow | AWS::EKS::IdentityProviderConfig | AWS::EKS::Addon | AWS::Glue::MLTransform | AWS::IoT::Policy | AWS::IoT::MitigationAction | AWS::IoTTwinMaker::Workspace | AWS::IoTTwinMaker::Entity | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Pipeline | AWS::IoTAnalytics::Channel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Project | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::AssetModel | AWS::IVS::Channel | AWS::IVS::RecordingConfiguration | AWS::IVS::PlaybackKeyPair | AWS::KinesisAnalyticsV2::Application | AWS::RDS::GlobalCluster | AWS::S3::MultiRegionAccessPoint | AWS::DeviceFarm::TestGridProject | AWS::Budgets::BudgetsAction | AWS::Lex::Bot | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::IoT::CustomMetric | AWS::Route53Resolver::FirewallDomainList | AWS::RoboMaker::RobotApplicationVersion | AWS::EC2::TrafficMirrorSession | AWS::IoTSiteWise::Gateway | AWS::Lex::BotAlias | AWS::LookoutMetrics::Alert | AWS::IoT::AccountAuditConfiguration | AWS::EC2::TrafficMirrorTarget | AWS::S3::StorageLens | AWS::IoT::ScheduledAudit | AWS::Events::Connection | AWS::EventSchemas::Schema | AWS::MediaPackage::PackagingConfiguration | AWS::KinesisVideo::SignalingChannel | AWS::AppStream::DirectoryConfig | AWS::LookoutVision::Project | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryReadiness::ResourceSet | AWS::RoboMaker::SimulationApplication | AWS::RoboMaker::RobotApplication | AWS::HealthLake::FHIRDatastore | AWS::Pinpoint::Segment | AWS::Pinpoint::ApplicationSettings | AWS::Events::Rule | AWS::EC2::DHCPOptions | AWS::EC2::NetworkInsightsPath | AWS::EC2::TrafficMirrorFilter | AWS::EC2::IPAM | AWS::IoTTwinMaker::Scene | AWS::NetworkManager::TransitGatewayRegistration | AWS::CustomerProfiles::Domain | AWS::AutoScaling::WarmPool | AWS::Connect::PhoneNumber | AWS::AppConfig::DeploymentStrategy | AWS::AppFlow::Flow | AWS::AuditManager::Assessment | AWS::CloudWatch::MetricStream | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::EC2::EC2Fleet | AWS::EC2::SubnetRouteTableAssociation | AWS::ECR::PullThroughCacheRule | AWS::GroundStation::Config | AWS::ImageBuilder::ImagePipeline | AWS::IoT::FleetMetric | AWS::IoTWireless::ServiceProfile | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::Site | AWS::Panorama::Package | AWS::Pinpoint::App | AWS::Redshift::ScheduledAction | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::SageMaker::AppImageConfig | AWS::SageMaker::Image | AWS::ECS::TaskSet | AWS::Cassandra::Keyspace | AWS::Signer::SigningProfile | AWS::Amplify::App | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualService | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::CodeArtifact::Repository | AWS::EC2::PrefixList | AWS::EC2::SpotFleet | AWS::Evidently::Project | AWS::Forecast::Dataset | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::Pinpoint::Campaign | AWS::Pinpoint::InAppTemplate | AWS::SageMaker::Domain | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::KinesisFirehose::DeliveryStream | AWS::Amplify::Branch | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::Route | AWS::Athena::PreparedStatement | AWS::EC2::IPAMScope | AWS::Evidently::Launch | AWS::Forecast::DatasetGroup | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::MissionProfile | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaTailor::PlaybackConfiguration | AWS::MSK::Configuration | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::ResilienceHub::App | AWS::ACMPCA::CertificateAuthority | AWS::AppConfig::HostedConfigurationVersion | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualRouter | AWS::AppRunner::Service | AWS::CustomerProfiles::ObjectType | AWS::DMS::Endpoint | AWS::EC2::CapacityReservation | AWS::EC2::ClientVpnEndpoint | AWS::Kendra::Index | AWS::KinesisVideo::Stream | AWS::Logs::Destination | AWS::Pinpoint::EmailChannel | AWS::S3::AccessPoint | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::LinkAssociation | AWS::IoTWireless::MulticastGroup | AWS::Personalize::DatasetGroup | AWS::IoTTwinMaker::ComponentType | AWS::CodeBuild::ReportGroup | AWS::SageMaker::FeatureGroup | AWS::MSK::BatchScramSecret | AWS::AppStream::Stack | AWS::IoT::JobTemplate | AWS::IoTWireless::FuotaTask | AWS::IoT::ProvisioningTemplate | AWS::InspectorV2::Filter | AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation | AWS::ServiceDiscovery::Instance | AWS::Transfer::Certificate | AWS::MediaConnect::FlowSource | AWS::APS::RuleGroupsNamespace | AWS::CodeGuruProfiler::ProfilingGroup | AWS::Route53Resolver::ResolverQueryLoggingConfig | AWS::Batch::SchedulingPolicy | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::Connect::Instance | AWS::Connect::QuickConnect | AWS::EC2::CarrierGateway | AWS::EC2::IPAMPool | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::ECS::CapacityProvider | AWS::IAM::InstanceProfile | AWS::IoT::CACertificate | AWS::IoTTwinMaker::SyncJob | AWS::KafkaConnect::Connector | AWS::Lambda::CodeSigningConfig | AWS::NetworkManager::ConnectPeer | AWS::ResourceExplorer2::Index | AWS::AppStream::Fleet | AWS::Cognito::UserPool | AWS::Cognito::UserPoolClient | AWS::Cognito::UserPoolGroup | AWS::EC2::NetworkInsightsAccessScope | AWS::EC2::NetworkInsightsAnalysis | AWS::Grafana::Workspace | AWS::GroundStation::DataflowEndpointGroup | AWS::ImageBuilder::ImageRecipe | AWS::KMS::Alias | AWS::M2::Environment | AWS::QuickSight::DataSource | AWS::QuickSight::Template | AWS::QuickSight::Theme | AWS::RDS::OptionGroup | AWS::Redshift::EndpointAccess | AWS::Route53Resolver::FirewallRuleGroup | AWS::SSM::Document`   
Required: Yes

## Response Syntax


```
{
   "NextToken": "string",
   "ResourceIdentifiers": [ 
      { 
         "ResourceId": "string",
         "ResourceName": "string",
         "ResourceType": "string",
         "SourceAccountId": "string",
         "SourceRegion": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_ListAggregateDiscoveredResources_ResponseSyntax) **   <a name="config-ListAggregateDiscoveredResources-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [ResourceIdentifiers](#API_ListAggregateDiscoveredResources_ResponseSyntax) **   <a name="config-ListAggregateDiscoveredResources-response-ResourceIdentifiers"></a>
Returns a list of `ResourceIdentifiers` objects.  
Type: Array of [AggregateResourceIdentifier](API_AggregateResourceIdentifier.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListAggregateDiscoveredResources) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListAggregateDiscoveredResources) 

# ListConfigurationRecorders


Returns a list of configuration recorders depending on the filters you specify.

## Request Syntax


```
{
   "Filters": [ 
      { 
         "filterName": "string",
         "filterValue": [ "string" ]
      }
   ],
   "MaxResults": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Filters](#API_ListConfigurationRecorders_RequestSyntax) **   <a name="config-ListConfigurationRecorders-request-Filters"></a>
Filters the results based on a list of `ConfigurationRecorderFilter` objects that you specify.  
Type: Array of [ConfigurationRecorderFilter](API_ConfigurationRecorderFilter.md) objects  
Required: No

 ** [MaxResults](#API_ListConfigurationRecorders_RequestSyntax) **   <a name="config-ListConfigurationRecorders-request-MaxResults"></a>
The maximum number of results to include in the response.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_ListConfigurationRecorders_RequestSyntax) **   <a name="config-ListConfigurationRecorders-request-NextToken"></a>
The `NextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "ConfigurationRecorderSummaries": [ 
      { 
         "arn": "string",
         "name": "string",
         "recordingScope": "string",
         "servicePrincipal": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationRecorderSummaries](#API_ListConfigurationRecorders_ResponseSyntax) **   <a name="config-ListConfigurationRecorders-response-ConfigurationRecorderSummaries"></a>
A list of `ConfigurationRecorderSummary` objects that includes.  
Type: Array of [ConfigurationRecorderSummary](API_ConfigurationRecorderSummary.md) objects

 ** [NextToken](#API_ListConfigurationRecorders_ResponseSyntax) **   <a name="config-ListConfigurationRecorders-response-NextToken"></a>
The `NextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListConfigurationRecorders) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListConfigurationRecorders) 

# ListConformancePackComplianceScores


Returns a list of conformance pack compliance scores. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. This metric provides you with a high-level view of the compliance state of your conformance packs. You can use it to identify, investigate, and understand the level of compliance in your conformance packs.

**Note**  
Conformance packs with no evaluation results will have a compliance score of `INSUFFICIENT_DATA`.

## Request Syntax


```
{
   "Filters": { 
      "ConformancePackNames": [ "string" ]
   },
   "Limit": number,
   "NextToken": "string",
   "SortBy": "string",
   "SortOrder": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Filters](#API_ListConformancePackComplianceScores_RequestSyntax) **   <a name="config-ListConformancePackComplianceScores-request-Filters"></a>
Filters the results based on the `ConformancePackComplianceScoresFilters`.  
Type: [ConformancePackComplianceScoresFilters](API_ConformancePackComplianceScoresFilters.md) object  
Required: No

 ** [Limit](#API_ListConformancePackComplianceScores_RequestSyntax) **   <a name="config-ListConformancePackComplianceScores-request-Limit"></a>
The maximum number of conformance pack compliance scores returned on each page.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 20.  
Required: No

 ** [NextToken](#API_ListConformancePackComplianceScores_RequestSyntax) **   <a name="config-ListConformancePackComplianceScores-request-NextToken"></a>
The `nextToken` string in a prior request that you can use to get the paginated response for the next set of conformance pack compliance scores.  
Type: String  
Required: No

 ** [SortBy](#API_ListConformancePackComplianceScores_RequestSyntax) **   <a name="config-ListConformancePackComplianceScores-request-SortBy"></a>
Sorts your conformance pack compliance scores in either ascending or descending order, depending on `SortOrder`.  
By default, conformance pack compliance scores are sorted in alphabetical order by name of the conformance pack. Enter `SCORE`, to sort conformance pack compliance scores by the numerical value of the compliance score.  
Type: String  
Valid Values: `SCORE`   
Required: No

 ** [SortOrder](#API_ListConformancePackComplianceScores_RequestSyntax) **   <a name="config-ListConformancePackComplianceScores-request-SortOrder"></a>
Determines the order in which conformance pack compliance scores are sorted. Either in ascending or descending order.  
By default, conformance pack compliance scores are sorted in alphabetical order by name of the conformance pack. Conformance pack compliance scores are sorted in reverse alphabetical order if you enter `DESCENDING`.  
You can sort conformance pack compliance scores by the numerical value of the compliance score by entering `SCORE` in the `SortBy` action. When compliance scores are sorted by `SCORE`, conformance packs with a compliance score of `INSUFFICIENT_DATA` will be last when sorting by ascending order and first when sorting by descending order.  
Type: String  
Valid Values: `ASCENDING | DESCENDING`   
Required: No

## Response Syntax


```
{
   "ConformancePackComplianceScores": [ 
      { 
         "ConformancePackName": "string",
         "LastUpdatedTime": number,
         "Score": "string"
      }
   ],
   "NextToken": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackComplianceScores](#API_ListConformancePackComplianceScores_ResponseSyntax) **   <a name="config-ListConformancePackComplianceScores-response-ConformancePackComplianceScores"></a>
A list of `ConformancePackComplianceScore` objects.  
Type: Array of [ConformancePackComplianceScore](API_ConformancePackComplianceScore.md) objects

 ** [NextToken](#API_ListConformancePackComplianceScores_ResponseSyntax) **   <a name="config-ListConformancePackComplianceScores-response-NextToken"></a>
The `nextToken` string that you can use to get the next page of results in a paginated response.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListConformancePackComplianceScores) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListConformancePackComplianceScores) 

# ListDiscoveredResources


Returns a list of resource resource identifiers for the specified resource types for the resources of that type. A *resource identifier* includes the resource type, ID, and (if available) the custom resource name.

The results consist of resources that Amazon Config has *discovered*, including those that Amazon Config is not currently recording. You can narrow the results to include only resources that have specific resource IDs or a resource name.

**Note**  
You can specify either resource IDs or a resource name, but not both, in the same request.

**Important**  
 * Amazon CloudFormation stack recording behavior in Amazon Config *   
When a Amazon CloudFormation stack fails to create (for example, it enters the `ROLLBACK_FAILED` state), Amazon Config does not record a configuration item (CI) for that stack. Configuration items are only recorded for stacks that reach the following states:  
 `CREATE_COMPLETE` 
 `UPDATE_COMPLETE` 
 `UPDATE_ROLLBACK_COMPLETE` 
 `UPDATE_ROLLBACK_FAILED` 
 `DELETE_FAILED` 
 `DELETE_COMPLETE` 
Because no CI is created for a failed stack creation, you won't see configuration history for that stack in Amazon Config, even after the stack is deleted. This helps make sure that Amazon Config only tracks resources that were successfully provisioned.

## Request Syntax


```
{
   "includeDeletedResources": boolean,
   "limit": number,
   "nextToken": "string",
   "resourceIds": [ "string" ],
   "resourceName": "string",
   "resourceType": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [includeDeletedResources](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-includeDeletedResources"></a>
Specifies whether Amazon Config includes deleted resources in the results. By default, deleted resources are not included.  
Type: Boolean  
Required: No

 ** [limit](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-limit"></a>
The maximum number of resource identifiers returned on each page. The default is 100. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [nextToken](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-nextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

 ** [resourceIds](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-resourceIds"></a>
The IDs of only those resources that you want Amazon Config to list in the response. If you do not specify this parameter, Amazon Config lists all resources of the specified type that it has discovered. You can list a minimum of 1 resourceID and a maximum of 20 resourceIds.  
Type: Array of strings  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: No

 ** [resourceName](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-resourceName"></a>
The custom name of only those resources that you want Amazon Config to list in the response. If you do not specify this parameter, Amazon Config lists all resources of the specified type that it has discovered.  
Type: String  
Required: No

 ** [resourceType](#API_ListDiscoveredResources_RequestSyntax) **   <a name="config-ListDiscoveredResources-request-resourceType"></a>
The type of resources that you want Amazon Config to list in the response.  
Type: String  
Valid Values: `AWS::EC2::CustomerGateway | AWS::EC2::EIP | AWS::EC2::Host | AWS::EC2::Instance | AWS::EC2::InternetGateway | AWS::EC2::NetworkAcl | AWS::EC2::NetworkInterface | AWS::EC2::RouteTable | AWS::EC2::SecurityGroup | AWS::EC2::Subnet | AWS::CloudTrail::Trail | AWS::EC2::Volume | AWS::EC2::VPC | AWS::EC2::VPNConnection | AWS::EC2::VPNGateway | AWS::EC2::RegisteredHAInstance | AWS::EC2::NatGateway | AWS::EC2::EgressOnlyInternetGateway | AWS::EC2::VPCEndpoint | AWS::EC2::VPCEndpointService | AWS::EC2::FlowLog | AWS::EC2::VPCPeeringConnection | AWS::Elasticsearch::Domain | AWS::IAM::Group | AWS::IAM::Policy | AWS::IAM::Role | AWS::IAM::User | AWS::ElasticLoadBalancingV2::LoadBalancer | AWS::ACM::Certificate | AWS::RDS::DBInstance | AWS::RDS::DBSubnetGroup | AWS::RDS::DBSecurityGroup | AWS::RDS::DBSnapshot | AWS::RDS::DBCluster | AWS::RDS::DBClusterSnapshot | AWS::RDS::EventSubscription | AWS::S3::Bucket | AWS::S3::AccountPublicAccessBlock | AWS::Redshift::Cluster | AWS::Redshift::ClusterSnapshot | AWS::Redshift::ClusterParameterGroup | AWS::Redshift::ClusterSecurityGroup | AWS::Redshift::ClusterSubnetGroup | AWS::Redshift::EventSubscription | AWS::SSM::ManagedInstanceInventory | AWS::CloudWatch::Alarm | AWS::CloudFormation::Stack | AWS::ElasticLoadBalancing::LoadBalancer | AWS::AutoScaling::AutoScalingGroup | AWS::AutoScaling::LaunchConfiguration | AWS::AutoScaling::ScalingPolicy | AWS::AutoScaling::ScheduledAction | AWS::DynamoDB::Table | AWS::CodeBuild::Project | AWS::WAF::RateBasedRule | AWS::WAF::Rule | AWS::WAF::RuleGroup | AWS::WAF::WebACL | AWS::WAFRegional::RateBasedRule | AWS::WAFRegional::Rule | AWS::WAFRegional::RuleGroup | AWS::WAFRegional::WebACL | AWS::CloudFront::Distribution | AWS::CloudFront::StreamingDistribution | AWS::Lambda::Function | AWS::NetworkFirewall::Firewall | AWS::NetworkFirewall::FirewallPolicy | AWS::NetworkFirewall::RuleGroup | AWS::ElasticBeanstalk::Application | AWS::ElasticBeanstalk::ApplicationVersion | AWS::ElasticBeanstalk::Environment | AWS::WAFv2::WebACL | AWS::WAFv2::RuleGroup | AWS::WAFv2::IPSet | AWS::WAFv2::RegexPatternSet | AWS::WAFv2::ManagedRuleSet | AWS::XRay::EncryptionConfig | AWS::SSM::AssociationCompliance | AWS::SSM::PatchCompliance | AWS::Shield::Protection | AWS::ShieldRegional::Protection | AWS::Config::ConformancePackCompliance | AWS::Config::ResourceCompliance | AWS::ApiGateway::Stage | AWS::ApiGateway::RestApi | AWS::ApiGatewayV2::Stage | AWS::ApiGatewayV2::Api | AWS::CodePipeline::Pipeline | AWS::ServiceCatalog::CloudFormationProvisionedProduct | AWS::ServiceCatalog::CloudFormationProduct | AWS::ServiceCatalog::Portfolio | AWS::SQS::Queue | AWS::KMS::Key | AWS::QLDB::Ledger | AWS::SecretsManager::Secret | AWS::SNS::Topic | AWS::SSM::FileData | AWS::Backup::BackupPlan | AWS::Backup::BackupSelection | AWS::Backup::BackupVault | AWS::Backup::RecoveryPoint | AWS::ECR::Repository | AWS::ECS::Cluster | AWS::ECS::Service | AWS::ECS::TaskDefinition | AWS::EFS::AccessPoint | AWS::EFS::FileSystem | AWS::EKS::Cluster | AWS::OpenSearch::Domain | AWS::EC2::TransitGateway | AWS::Kinesis::Stream | AWS::Kinesis::StreamConsumer | AWS::CodeDeploy::Application | AWS::CodeDeploy::DeploymentConfig | AWS::CodeDeploy::DeploymentGroup | AWS::EC2::LaunchTemplate | AWS::ECR::PublicRepository | AWS::GuardDuty::Detector | AWS::EMR::SecurityConfiguration | AWS::SageMaker::CodeRepository | AWS::Route53Resolver::ResolverEndpoint | AWS::Route53Resolver::ResolverRule | AWS::Route53Resolver::ResolverRuleAssociation | AWS::DMS::ReplicationSubnetGroup | AWS::DMS::EventSubscription | AWS::MSK::Cluster | AWS::StepFunctions::Activity | AWS::WorkSpaces::Workspace | AWS::WorkSpaces::ConnectionAlias | AWS::SageMaker::Model | AWS::ElasticLoadBalancingV2::Listener | AWS::StepFunctions::StateMachine | AWS::Batch::JobQueue | AWS::Batch::ComputeEnvironment | AWS::AccessAnalyzer::Analyzer | AWS::Athena::WorkGroup | AWS::Athena::DataCatalog | AWS::Detective::Graph | AWS::GlobalAccelerator::Accelerator | AWS::GlobalAccelerator::EndpointGroup | AWS::GlobalAccelerator::Listener | AWS::EC2::TransitGatewayAttachment | AWS::EC2::TransitGatewayRouteTable | AWS::DMS::Certificate | AWS::AppConfig::Application | AWS::AppSync::GraphQLApi | AWS::DataSync::LocationSMB | AWS::DataSync::LocationFSxLustre | AWS::DataSync::LocationS3 | AWS::DataSync::LocationEFS | AWS::DataSync::Task | AWS::DataSync::LocationNFS | AWS::EC2::NetworkInsightsAccessScopeAnalysis | AWS::EKS::FargateProfile | AWS::Glue::Job | AWS::GuardDuty::ThreatIntelSet | AWS::GuardDuty::IPSet | AWS::SageMaker::Workteam | AWS::SageMaker::NotebookInstanceLifecycleConfig | AWS::ServiceDiscovery::Service | AWS::ServiceDiscovery::PublicDnsNamespace | AWS::SES::ContactList | AWS::SES::ConfigurationSet | AWS::Route53::HostedZone | AWS::IoTEvents::Input | AWS::IoTEvents::DetectorModel | AWS::IoTEvents::AlarmModel | AWS::ServiceDiscovery::HttpNamespace | AWS::Events::EventBus | AWS::ImageBuilder::ContainerRecipe | AWS::ImageBuilder::DistributionConfiguration | AWS::ImageBuilder::InfrastructureConfiguration | AWS::DataSync::LocationObjectStorage | AWS::DataSync::LocationHDFS | AWS::Glue::Classifier | AWS::Route53RecoveryReadiness::Cell | AWS::Route53RecoveryReadiness::ReadinessCheck | AWS::ECR::RegistryPolicy | AWS::Backup::ReportPlan | AWS::Lightsail::Certificate | AWS::RUM::AppMonitor | AWS::Events::Endpoint | AWS::SES::ReceiptRuleSet | AWS::Events::Archive | AWS::Events::ApiDestination | AWS::Lightsail::Disk | AWS::FIS::ExperimentTemplate | AWS::DataSync::LocationFSxWindows | AWS::SES::ReceiptFilter | AWS::GuardDuty::Filter | AWS::SES::Template | AWS::AmazonMQ::Broker | AWS::AppConfig::Environment | AWS::AppConfig::ConfigurationProfile | AWS::Cloud9::EnvironmentEC2 | AWS::EventSchemas::Registry | AWS::EventSchemas::RegistryPolicy | AWS::EventSchemas::Discoverer | AWS::FraudDetector::Label | AWS::FraudDetector::EntityType | AWS::FraudDetector::Variable | AWS::FraudDetector::Outcome | AWS::IoT::Authorizer | AWS::IoT::SecurityProfile | AWS::IoT::RoleAlias | AWS::IoT::Dimension | AWS::IoTAnalytics::Datastore | AWS::Lightsail::Bucket | AWS::Lightsail::StaticIp | AWS::MediaPackage::PackagingGroup | AWS::Route53RecoveryReadiness::RecoveryGroup | AWS::ResilienceHub::ResiliencyPolicy | AWS::Transfer::Workflow | AWS::EKS::IdentityProviderConfig | AWS::EKS::Addon | AWS::Glue::MLTransform | AWS::IoT::Policy | AWS::IoT::MitigationAction | AWS::IoTTwinMaker::Workspace | AWS::IoTTwinMaker::Entity | AWS::IoTAnalytics::Dataset | AWS::IoTAnalytics::Pipeline | AWS::IoTAnalytics::Channel | AWS::IoTSiteWise::Dashboard | AWS::IoTSiteWise::Project | AWS::IoTSiteWise::Portal | AWS::IoTSiteWise::AssetModel | AWS::IVS::Channel | AWS::IVS::RecordingConfiguration | AWS::IVS::PlaybackKeyPair | AWS::KinesisAnalyticsV2::Application | AWS::RDS::GlobalCluster | AWS::S3::MultiRegionAccessPoint | AWS::DeviceFarm::TestGridProject | AWS::Budgets::BudgetsAction | AWS::Lex::Bot | AWS::CodeGuruReviewer::RepositoryAssociation | AWS::IoT::CustomMetric | AWS::Route53Resolver::FirewallDomainList | AWS::RoboMaker::RobotApplicationVersion | AWS::EC2::TrafficMirrorSession | AWS::IoTSiteWise::Gateway | AWS::Lex::BotAlias | AWS::LookoutMetrics::Alert | AWS::IoT::AccountAuditConfiguration | AWS::EC2::TrafficMirrorTarget | AWS::S3::StorageLens | AWS::IoT::ScheduledAudit | AWS::Events::Connection | AWS::EventSchemas::Schema | AWS::MediaPackage::PackagingConfiguration | AWS::KinesisVideo::SignalingChannel | AWS::AppStream::DirectoryConfig | AWS::LookoutVision::Project | AWS::Route53RecoveryControl::Cluster | AWS::Route53RecoveryControl::SafetyRule | AWS::Route53RecoveryControl::ControlPanel | AWS::Route53RecoveryControl::RoutingControl | AWS::Route53RecoveryReadiness::ResourceSet | AWS::RoboMaker::SimulationApplication | AWS::RoboMaker::RobotApplication | AWS::HealthLake::FHIRDatastore | AWS::Pinpoint::Segment | AWS::Pinpoint::ApplicationSettings | AWS::Events::Rule | AWS::EC2::DHCPOptions | AWS::EC2::NetworkInsightsPath | AWS::EC2::TrafficMirrorFilter | AWS::EC2::IPAM | AWS::IoTTwinMaker::Scene | AWS::NetworkManager::TransitGatewayRegistration | AWS::CustomerProfiles::Domain | AWS::AutoScaling::WarmPool | AWS::Connect::PhoneNumber | AWS::AppConfig::DeploymentStrategy | AWS::AppFlow::Flow | AWS::AuditManager::Assessment | AWS::CloudWatch::MetricStream | AWS::DeviceFarm::InstanceProfile | AWS::DeviceFarm::Project | AWS::EC2::EC2Fleet | AWS::EC2::SubnetRouteTableAssociation | AWS::ECR::PullThroughCacheRule | AWS::GroundStation::Config | AWS::ImageBuilder::ImagePipeline | AWS::IoT::FleetMetric | AWS::IoTWireless::ServiceProfile | AWS::NetworkManager::Device | AWS::NetworkManager::GlobalNetwork | AWS::NetworkManager::Link | AWS::NetworkManager::Site | AWS::Panorama::Package | AWS::Pinpoint::App | AWS::Redshift::ScheduledAction | AWS::Route53Resolver::FirewallRuleGroupAssociation | AWS::SageMaker::AppImageConfig | AWS::SageMaker::Image | AWS::ECS::TaskSet | AWS::Cassandra::Keyspace | AWS::Signer::SigningProfile | AWS::Amplify::App | AWS::AppMesh::VirtualNode | AWS::AppMesh::VirtualService | AWS::AppRunner::VpcConnector | AWS::AppStream::Application | AWS::CodeArtifact::Repository | AWS::EC2::PrefixList | AWS::EC2::SpotFleet | AWS::Evidently::Project | AWS::Forecast::Dataset | AWS::IAM::SAMLProvider | AWS::IAM::ServerCertificate | AWS::Pinpoint::Campaign | AWS::Pinpoint::InAppTemplate | AWS::SageMaker::Domain | AWS::Transfer::Agreement | AWS::Transfer::Connector | AWS::KinesisFirehose::DeliveryStream | AWS::Amplify::Branch | AWS::AppIntegrations::EventIntegration | AWS::AppMesh::Route | AWS::Athena::PreparedStatement | AWS::EC2::IPAMScope | AWS::Evidently::Launch | AWS::Forecast::DatasetGroup | AWS::GreengrassV2::ComponentVersion | AWS::GroundStation::MissionProfile | AWS::MediaConnect::FlowEntitlement | AWS::MediaConnect::FlowVpcInterface | AWS::MediaTailor::PlaybackConfiguration | AWS::MSK::Configuration | AWS::Personalize::Dataset | AWS::Personalize::Schema | AWS::Personalize::Solution | AWS::Pinpoint::EmailTemplate | AWS::Pinpoint::EventStream | AWS::ResilienceHub::App | AWS::ACMPCA::CertificateAuthority | AWS::AppConfig::HostedConfigurationVersion | AWS::AppMesh::VirtualGateway | AWS::AppMesh::VirtualRouter | AWS::AppRunner::Service | AWS::CustomerProfiles::ObjectType | AWS::DMS::Endpoint | AWS::EC2::CapacityReservation | AWS::EC2::ClientVpnEndpoint | AWS::Kendra::Index | AWS::KinesisVideo::Stream | AWS::Logs::Destination | AWS::Pinpoint::EmailChannel | AWS::S3::AccessPoint | AWS::NetworkManager::CustomerGatewayAssociation | AWS::NetworkManager::LinkAssociation | AWS::IoTWireless::MulticastGroup | AWS::Personalize::DatasetGroup | AWS::IoTTwinMaker::ComponentType | AWS::CodeBuild::ReportGroup | AWS::SageMaker::FeatureGroup | AWS::MSK::BatchScramSecret | AWS::AppStream::Stack | AWS::IoT::JobTemplate | AWS::IoTWireless::FuotaTask | AWS::IoT::ProvisioningTemplate | AWS::InspectorV2::Filter | AWS::Route53Resolver::ResolverQueryLoggingConfigAssociation | AWS::ServiceDiscovery::Instance | AWS::Transfer::Certificate | AWS::MediaConnect::FlowSource | AWS::APS::RuleGroupsNamespace | AWS::CodeGuruProfiler::ProfilingGroup | AWS::Route53Resolver::ResolverQueryLoggingConfig | AWS::Batch::SchedulingPolicy | AWS::ACMPCA::CertificateAuthorityActivation | AWS::AppMesh::GatewayRoute | AWS::AppMesh::Mesh | AWS::Connect::Instance | AWS::Connect::QuickConnect | AWS::EC2::CarrierGateway | AWS::EC2::IPAMPool | AWS::EC2::TransitGatewayConnect | AWS::EC2::TransitGatewayMulticastDomain | AWS::ECS::CapacityProvider | AWS::IAM::InstanceProfile | AWS::IoT::CACertificate | AWS::IoTTwinMaker::SyncJob | AWS::KafkaConnect::Connector | AWS::Lambda::CodeSigningConfig | AWS::NetworkManager::ConnectPeer | AWS::ResourceExplorer2::Index | AWS::AppStream::Fleet | AWS::Cognito::UserPool | AWS::Cognito::UserPoolClient | AWS::Cognito::UserPoolGroup | AWS::EC2::NetworkInsightsAccessScope | AWS::EC2::NetworkInsightsAnalysis | AWS::Grafana::Workspace | AWS::GroundStation::DataflowEndpointGroup | AWS::ImageBuilder::ImageRecipe | AWS::KMS::Alias | AWS::M2::Environment | AWS::QuickSight::DataSource | AWS::QuickSight::Template | AWS::QuickSight::Theme | AWS::RDS::OptionGroup | AWS::Redshift::EndpointAccess | AWS::Route53Resolver::FirewallRuleGroup | AWS::SSM::Document`   
Required: Yes

## Response Syntax


```
{
   "nextToken": "string",
   "resourceIdentifiers": [ 
      { 
         "resourceDeletionTime": number,
         "resourceId": "string",
         "resourceName": "string",
         "resourceType": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [nextToken](#API_ListDiscoveredResources_ResponseSyntax) **   <a name="config-ListDiscoveredResources-response-nextToken"></a>
The string that you use in a subsequent request to get the next page of results in a paginated response.  
Type: String

 ** [resourceIdentifiers](#API_ListDiscoveredResources_ResponseSyntax) **   <a name="config-ListDiscoveredResources-response-resourceIdentifiers"></a>
The details that identify a resource that is discovered by Amazon Config, including the resource type, ID, and (if available) the custom resource name.  
Type: Array of [ResourceIdentifier](API_ResourceIdentifier.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListDiscoveredResources) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListDiscoveredResources) 

# ListResourceEvaluations


Returns a list of proactive resource evaluations.

## Request Syntax


```
{
   "Filters": { 
      "EvaluationContextIdentifier": "string",
      "EvaluationMode": "string",
      "TimeWindow": { 
         "EndTime": number,
         "StartTime": number
      }
   },
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Filters](#API_ListResourceEvaluations_RequestSyntax) **   <a name="config-ListResourceEvaluations-request-Filters"></a>
Returns a `ResourceEvaluationFilters` object.  
Type: [ResourceEvaluationFilters](API_ResourceEvaluationFilters.md) object  
Required: No

 ** [Limit](#API_ListResourceEvaluations_RequestSyntax) **   <a name="config-ListResourceEvaluations-request-Limit"></a>
The maximum number of evaluations returned on each page. The default is 10. You cannot specify a number greater than 100. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_ListResourceEvaluations_RequestSyntax) **   <a name="config-ListResourceEvaluations-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "ResourceEvaluations": [ 
      { 
         "EvaluationMode": "string",
         "EvaluationStartTimestamp": number,
         "ResourceEvaluationId": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_ListResourceEvaluations_ResponseSyntax) **   <a name="config-ListResourceEvaluations-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.  
Type: String

 ** [ResourceEvaluations](#API_ListResourceEvaluations_ResponseSyntax) **   <a name="config-ListResourceEvaluations-response-ResourceEvaluations"></a>
Returns a `ResourceEvaluations` object.  
Type: Array of [ResourceEvaluation](API_ResourceEvaluation.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** InvalidTimeRangeException **   
The specified time range is not valid. The earlier time is not chronologically before the later time.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListResourceEvaluations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListResourceEvaluations) 

# ListStoredQueries


Lists the stored queries for a single Amazon Web Services account and a single Amazon Web Services Region. The default is 100. 

## Request Syntax


```
{
   "MaxResults": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [MaxResults](#API_ListStoredQueries_RequestSyntax) **   <a name="config-ListStoredQueries-request-MaxResults"></a>
The maximum number of results to be returned with a single call.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_ListStoredQueries_RequestSyntax) **   <a name="config-ListStoredQueries-request-NextToken"></a>
The nextToken string returned in a previous request that you use to request the next page of results in a paginated response.  
Type: String  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "StoredQueryMetadata": [ 
      { 
         "Description": "string",
         "QueryArn": "string",
         "QueryId": "string",
         "QueryName": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_ListStoredQueries_ResponseSyntax) **   <a name="config-ListStoredQueries-response-NextToken"></a>
If the previous paginated request didn't return all of the remaining results, the response object's `NextToken` parameter value is set to a token. To retrieve the next set of results, call this operation again and assign that token to the request object's `NextToken` parameter. If there are no remaining results, the previous response object's `NextToken` parameter is set to `null`.   
Type: String

 ** [StoredQueryMetadata](#API_ListStoredQueries_ResponseSyntax) **   <a name="config-ListStoredQueries-response-StoredQueryMetadata"></a>
A list of `StoredQueryMetadata` objects.  
Type: Array of [StoredQueryMetadata](API_StoredQueryMetadata.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListStoredQueries) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListStoredQueries) 

# ListTagsForResource


List the tags for Amazon Config resource.

## Request Syntax


```
{
   "Limit": number,
   "NextToken": "string",
   "ResourceArn": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Limit](#API_ListTagsForResource_RequestSyntax) **   <a name="config-ListTagsForResource-request-Limit"></a>
The maximum number of tags returned on each page. The limit maximum is 50. You cannot specify a number greater than 50. If you specify 0, Amazon Config uses the default.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_ListTagsForResource_RequestSyntax) **   <a name="config-ListTagsForResource-request-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String  
Required: No

 ** [ResourceArn](#API_ListTagsForResource_RequestSyntax) **   <a name="config-ListTagsForResource-request-ResourceArn"></a>
The Amazon Resource Name (ARN) that identifies the resource for which to list the tags. The following resources are supported:  
+  `ConfigurationRecorder` 
+  `ConfigRule` 
+  `OrganizationConfigRule` 
+  `ConformancePack` 
+  `OrganizationConformancePack` 
+  `ConfigurationAggregator` 
+  `AggregationAuthorization` 
+  `StoredQuery` 
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: Yes

## Response Syntax


```
{
   "NextToken": "string",
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_ListTagsForResource_ResponseSyntax) **   <a name="config-ListTagsForResource-response-NextToken"></a>
The `nextToken` string returned on a previous page that you use to get the next page of results in a paginated response.   
Type: String

 ** [Tags](#API_ListTagsForResource_ResponseSyntax) **   <a name="config-ListTagsForResource-response-Tags"></a>
The tags for the resource.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 50 items.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/ListTagsForResource) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/ListTagsForResource) 

# PutAggregationAuthorization


Authorizes the aggregator account and region to collect data from the source account and region. 

**Note**  
 **Tags are added at creation and cannot be updated with this operation**   
 `PutAggregationAuthorization` is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different `tags` values, Amazon Config will ignore these differences and treat it as an idempotent request of the previous. In this case, `tags` will not be updated, even if they are different.  
Use [TagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_TagResource.html) and [UntagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_UntagResource.html) to update tags after creation.

## Request Syntax


```
{
   "AuthorizedAccountId": "string",
   "AuthorizedAwsRegion": "string",
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [AuthorizedAccountId](#API_PutAggregationAuthorization_RequestSyntax) **   <a name="config-PutAggregationAuthorization-request-AuthorizedAccountId"></a>
The 12-digit account ID of the account authorized to aggregate data.  
Type: String  
Pattern: `\d{12}`   
Required: Yes

 ** [AuthorizedAwsRegion](#API_PutAggregationAuthorization_RequestSyntax) **   <a name="config-PutAggregationAuthorization-request-AuthorizedAwsRegion"></a>
The region authorized to collect aggregated data.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Required: Yes

 ** [Tags](#API_PutAggregationAuthorization_RequestSyntax) **   <a name="config-PutAggregationAuthorization-request-Tags"></a>
An array of tag object.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Syntax


```
{
   "AggregationAuthorization": { 
      "AggregationAuthorizationArn": "string",
      "AuthorizedAccountId": "string",
      "AuthorizedAwsRegion": "string",
      "CreationTime": number
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [AggregationAuthorization](#API_PutAggregationAuthorization_ResponseSyntax) **   <a name="config-PutAggregationAuthorization-response-AggregationAuthorization"></a>
Returns an AggregationAuthorization object.   
Type: [AggregationAuthorization](API_AggregationAuthorization.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutAggregationAuthorization) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutAggregationAuthorization) 

# PutConfigRule


Adds or updates an Amazon Config rule to evaluate if your Amazon resources comply with your desired configurations. For information on how many Amazon Config rules you can have per account, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.

There are two types of rules: * Amazon Config Managed Rules* and * Amazon Config Custom Rules*. You can use `PutConfigRule` to create both Amazon Config Managed Rules and Amazon Config Custom Rules.

 Amazon Config Managed Rules are predefined, customizable rules created by Amazon Config. For a list of managed rules, see [List of Amazon Config Managed Rules](https://docs.amazonaws.cn/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an Amazon Config managed rule, you must specify the rule's identifier for the `SourceIdentifier` key.

 Amazon Config Custom Rules are rules that you create from scratch. There are two ways to create Amazon Config custom rules: with Lambda functions ([Amazon Lambda Developer Guide](https://docs.amazonaws.cn/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with Guard ([Guard GitHub Repository](https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. Amazon Config custom rules created with Amazon Lambda are called * Amazon Config Custom Lambda Rules* and Amazon Config custom rules created with Guard are called * Amazon Config Custom Policy Rules*.

If you are adding a new Amazon Config Custom Lambda rule, you first need to create an Amazon Lambda function that the rule invokes to evaluate your resources. When you use `PutConfigRule` to add a Custom Lambda rule to Amazon Config, you must specify the Amazon Resource Name (ARN) that Amazon Lambda assigns to the function. You specify the ARN in the `SourceIdentifier` key. This key is part of the `Source` object, which is part of the `ConfigRule` object. 

For any new Amazon Config rule that you add, specify the `ConfigRuleName` in the `ConfigRule` object. Do not specify the `ConfigRuleArn` or the `ConfigRuleId`. These values are generated by Amazon Config for new rules.

If you are updating a rule that you added previously, you can specify the rule by `ConfigRuleName`, `ConfigRuleId`, or `ConfigRuleArn` in the `ConfigRule` data type that you use in this request.

For more information about developing and using Amazon Config rules, see [Evaluating Resources with Amazon Config Rules](https://docs.amazonaws.cn/config/latest/developerguide/evaluate-config.html) in the * Amazon Config Developer Guide*.

**Note**  
 **Tags are added at creation and cannot be updated with this operation**   
 `PutConfigRule` is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different `tags` values, Amazon Config will ignore these differences and treat it as an idempotent request of the previous. In this case, `tags` will not be updated, even if they are different.  
Use [TagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_TagResource.html) and [UntagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_UntagResource.html) to update tags after creation.

## Request Syntax


```
{
   "ConfigRule": { 
      "ConfigRuleArn": "string",
      "ConfigRuleId": "string",
      "ConfigRuleName": "string",
      "ConfigRuleState": "string",
      "CreatedBy": "string",
      "Description": "string",
      "EvaluationModes": [ 
         { 
            "Mode": "string"
         }
      ],
      "InputParameters": "string",
      "MaximumExecutionFrequency": "string",
      "Scope": { 
         "ComplianceResourceId": "string",
         "ComplianceResourceTypes": [ "string" ],
         "TagKey": "string",
         "TagValue": "string"
      },
      "Source": { 
         "CustomPolicyDetails": { 
            "EnableDebugLogDelivery": boolean,
            "PolicyRuntime": "string",
            "PolicyText": "string"
         },
         "Owner": "string",
         "SourceDetails": [ 
            { 
               "EventSource": "string",
               "MaximumExecutionFrequency": "string",
               "MessageType": "string"
            }
         ],
         "SourceIdentifier": "string"
      }
   },
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRule](#API_PutConfigRule_RequestSyntax) **   <a name="config-PutConfigRule-request-ConfigRule"></a>
The rule that you want to add to your account.  
Type: [ConfigRule](API_ConfigRule.md) object  
Required: Yes

 ** [Tags](#API_PutConfigRule_RequestSyntax) **   <a name="config-PutConfigRule-request-Tags"></a>
An array of tag object.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** MaxNumberOfConfigRulesExceededException **   
Failed to add the Amazon Config rule because the account already contains the maximum number of 1000 rules. Consider deleting any deactivated rules before you add new rules.  
HTTP Status Code: 400

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutConfigRule) 

# PutConfigurationAggregator


Creates and updates the configuration aggregator with the selected source accounts and regions. The source account can be individual account(s) or an organization.

 `accountIds` that are passed will be replaced with existing accounts. If you want to add additional accounts into the aggregator, call `DescribeConfigurationAggregators` to get the previous accounts and then append new ones.

**Note**  
 Amazon Config should be enabled in source accounts and regions you want to aggregate.  
If your source type is an organization, you must be signed in to the management account or a registered delegated administrator and all the features must be enabled in your organization. If the caller is a management account, Amazon Config calls `EnableAwsServiceAccess` API to enable integration between Amazon Config and Amazon Organizations. If the caller is a registered delegated administrator, Amazon Config calls `ListDelegatedAdministrators` API to verify whether the caller is a valid delegated administrator.  
To register a delegated administrator, see [Register a Delegated Administrator](https://docs.amazonaws.cn/config/latest/developerguide/set-up-aggregator-cli.html#register-a-delegated-administrator-cli) in the * Amazon Config developer guide*. 

**Note**  
 **Tags are added at creation and cannot be updated with this operation**   
 `PutConfigurationAggregator` is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different `tags` values, Amazon Config will ignore these differences and treat it as an idempotent request of the previous. In this case, `tags` will not be updated, even if they are different.  
Use [TagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_TagResource.html) and [UntagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_UntagResource.html) to update tags after creation.

## Request Syntax


```
{
   "AccountAggregationSources": [ 
      { 
         "AccountIds": [ "string" ],
         "AllAwsRegions": boolean,
         "AwsRegions": [ "string" ]
      }
   ],
   "AggregatorFilters": { 
      "ResourceType": { 
         "Type": "string",
         "Value": [ "string" ]
      },
      "ServicePrincipal": { 
         "Type": "string",
         "Value": [ "string" ]
      }
   },
   "ConfigurationAggregatorName": "string",
   "OrganizationAggregationSource": { 
      "AllAwsRegions": boolean,
      "AwsRegions": [ "string" ],
      "RoleArn": "string"
   },
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [AccountAggregationSources](#API_PutConfigurationAggregator_RequestSyntax) **   <a name="config-PutConfigurationAggregator-request-AccountAggregationSources"></a>
A list of AccountAggregationSource object.   
Type: Array of [AccountAggregationSource](API_AccountAggregationSource.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 1 item.  
Required: No

 ** [AggregatorFilters](#API_PutConfigurationAggregator_RequestSyntax) **   <a name="config-PutConfigurationAggregator-request-AggregatorFilters"></a>
An object to filter configuration recorders in an aggregator. Either `ResourceType` or `ServicePrincipal` is required.  
Type: [AggregatorFilters](API_AggregatorFilters.md) object  
Required: No

 ** [ConfigurationAggregatorName](#API_PutConfigurationAggregator_RequestSyntax) **   <a name="config-PutConfigurationAggregator-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [OrganizationAggregationSource](#API_PutConfigurationAggregator_RequestSyntax) **   <a name="config-PutConfigurationAggregator-request-OrganizationAggregationSource"></a>
An OrganizationAggregationSource object.  
Type: [OrganizationAggregationSource](API_OrganizationAggregationSource.md) object  
Required: No

 ** [Tags](#API_PutConfigurationAggregator_RequestSyntax) **   <a name="config-PutConfigurationAggregator-request-Tags"></a>
An array of tag object.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Syntax


```
{
   "ConfigurationAggregator": { 
      "AccountAggregationSources": [ 
         { 
            "AccountIds": [ "string" ],
            "AllAwsRegions": boolean,
            "AwsRegions": [ "string" ]
         }
      ],
      "AggregatorFilters": { 
         "ResourceType": { 
            "Type": "string",
            "Value": [ "string" ]
         },
         "ServicePrincipal": { 
            "Type": "string",
            "Value": [ "string" ]
         }
      },
      "ConfigurationAggregatorArn": "string",
      "ConfigurationAggregatorName": "string",
      "CreatedBy": "string",
      "CreationTime": number,
      "LastUpdatedTime": number,
      "OrganizationAggregationSource": { 
         "AllAwsRegions": boolean,
         "AwsRegions": [ "string" ],
         "RoleArn": "string"
      }
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConfigurationAggregator](#API_PutConfigurationAggregator_ResponseSyntax) **   <a name="config-PutConfigurationAggregator-response-ConfigurationAggregator"></a>
Returns a ConfigurationAggregator object.  
Type: [ConfigurationAggregator](API_ConfigurationAggregator.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** InvalidRoleException **   
You have provided a null or empty Amazon Resource Name (ARN) for the IAM role assumed by Amazon Config and used by the customer managed configuration recorder.  
HTTP Status Code: 400

 ** LimitExceededException **   
For `PutServiceLinkedConfigurationRecorder` API, this exception is thrown if the number of service-linked roles in the account exceeds the limit.  
For `StartConfigRulesEvaluation` API, this exception is thrown if an evaluation is in progress or if you call the [StartConfigRulesEvaluation](API_StartConfigRulesEvaluation.md) API more than once per minute.  
For `PutConfigurationAggregator` API, this exception is thrown if the number of accounts and aggregators exceeds the limit.  
HTTP Status Code: 400

 ** NoAvailableOrganizationException **   
Organization is no longer available.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

 ** OrganizationAllFeaturesNotEnabledException **   
 Amazon Config resource cannot be created because your organization does not have all features enabled.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutConfigurationAggregator) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutConfigurationAggregator) 

# PutConfigurationRecorder


Creates or updates the customer managed configuration recorder.

You can use this operation to create a new customer managed configuration recorder or to update the `roleARN` and the `recordingGroup` for an existing customer managed configuration recorder.

To start the customer managed configuration recorder and begin recording configuration changes for the resource types you specify, use the [StartConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StartConfigurationRecorder.html) operation.

For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html](https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html) in the * Amazon Config Developer Guide*.

**Note**  
 **One customer managed configuration recorder per account per Region**   
You can create only one customer managed configuration recorder for each account for each Amazon Web Services Region.  
 **Default is to record all supported resource types, excluding the global IAM resource types**   
If you have not specified values for the `recordingGroup` field, the default for the customer managed configuration recorder is to record all supported resource types, excluding the global IAM resource types: `AWS::IAM::Group`, `AWS::IAM::Policy`, `AWS::IAM::Role`, and `AWS::IAM::User`.  
 **Tags are added at creation and cannot be updated**   
 `PutConfigurationRecorder` is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different tags values, Amazon Config will ignore these differences and treat it as an idempotent request of the previous. In this case, tags will not be updated, even if they are different.  
Use [TagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_TagResource.html) and [UntagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_UntagResource.html) to update tags after creation.

## Request Syntax


```
{
   "ConfigurationRecorder": { 
      "arn": "string",
      "name": "string",
      "recordingGroup": { 
         "allSupported": boolean,
         "exclusionByResourceTypes": { 
            "resourceTypes": [ "string" ]
         },
         "includeGlobalResourceTypes": boolean,
         "recordingStrategy": { 
            "useOnly": "string"
         },
         "resourceTypes": [ "string" ]
      },
      "recordingMode": { 
         "recordingFrequency": "string",
         "recordingModeOverrides": [ 
            { 
               "description": "string",
               "recordingFrequency": "string",
               "resourceTypes": [ "string" ]
            }
         ]
      },
      "recordingScope": "string",
      "roleARN": "string",
      "servicePrincipal": "string"
   },
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorder](#API_PutConfigurationRecorder_RequestSyntax) **   <a name="config-PutConfigurationRecorder-request-ConfigurationRecorder"></a>
An object for the configuration recorder. A configuration recorder records configuration changes for the resource types in scope.  
Type: [ConfigurationRecorder](API_ConfigurationRecorder.md) object  
Required: Yes

 ** [Tags](#API_PutConfigurationRecorder_RequestSyntax) **   <a name="config-PutConfigurationRecorder-request-Tags"></a>
The tags for the customer managed configuration recorder. Each tag consists of a key and an optional value, both of which you define.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** InvalidRecordingGroupException **   
One of the following errors:  
+ You have provided a combination of parameter values that is not valid. For example:
  + Setting the `allSupported` field of [RecordingGroup](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingGroup.html) to `true`, but providing a non-empty list for the `resourceTypes`field of [RecordingGroup](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingGroup.html).
  + Setting the `allSupported` field of [RecordingGroup](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingGroup.html) to `true`, but also setting the `useOnly` field of [RecordingStrategy](https://docs.amazonaws.cn/config/latest/APIReference/API_RecordingStrategy.html) to `EXCLUSION_BY_RESOURCE_TYPES`.
+ Every parameter is either null, false, or empty.
+ You have reached the limit of the number of resource types you can provide for the recording group.
+ You have provided resource types or a recording strategy that are not valid.
HTTP Status Code: 400

 ** InvalidRoleException **   
You have provided a null or empty Amazon Resource Name (ARN) for the IAM role assumed by Amazon Config and used by the customer managed configuration recorder.  
HTTP Status Code: 400

 ** MaxNumberOfConfigurationRecordersExceededException **   
You have reached the limit of the number of configuration recorders you can create.  
HTTP Status Code: 400

 ** UnmodifiableEntityException **   
The requested operation is not valid.  
For [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html), you will see this exception because you cannot use this operation to create a service-linked configuration recorder. Use the [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html) operation to create a service-linked configuration recorder.  
For [DeleteConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteConfigurationRecorder.html), you will see this exception because you cannot use this operation to delete a service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
For [StartConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StartConfigurationRecorder.html) and [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html), you will see this exception because these operations do not affect service-linked configuration recorders. Service-linked configuration recorders are always recording. To stop recording, you must delete the service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutConfigurationRecorder) 

# PutConformancePack


Creates or updates a conformance pack. A conformance pack is a collection of Amazon Config rules that can be easily deployed in an account and a region and across an organization. For information on how many conformance packs you can have per account, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.

**Important**  
When you use `PutConformancePack` to deploy conformance packs in your account, the operation can create Amazon Config rules and remediation actions without requiring `config:PutConfigRule` or `config:PutRemediationConfigurations` permissions in your account IAM policies.  
This API uses the `AWSServiceRoleForConfigConforms` service-linked role in your account to create conformance pack resources. This service-linked role includes the permissions to create Amazon Config rules and remediation configurations, even if your account IAM policies explicitly deny these actions.

This API creates a service-linked role `AWSServiceRoleForConfigConforms` in your account. The service-linked role is created only when the role does not exist in your account. 

**Note**  
You must specify only one of the follow parameters: `TemplateS3Uri`, `TemplateBody` or `TemplateSSMDocumentDetails`.

## Request Syntax


```
{
   "ConformancePackInputParameters": [ 
      { 
         "ParameterName": "string",
         "ParameterValue": "string"
      }
   ],
   "ConformancePackName": "string",
   "DeliveryS3Bucket": "string",
   "DeliveryS3KeyPrefix": "string",
   "TemplateBody": "string",
   "TemplateS3Uri": "string",
   "TemplateSSMDocumentDetails": { 
      "DocumentName": "string",
      "DocumentVersion": "string"
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackInputParameters](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-ConformancePackInputParameters"></a>
A list of `ConformancePackInputParameter` objects.  
Type: Array of [ConformancePackInputParameter](API_ConformancePackInputParameter.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 60 items.  
Required: No

 ** [ConformancePackName](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-ConformancePackName"></a>
The unique name of the conformance pack you want to deploy.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

 ** [DeliveryS3Bucket](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-DeliveryS3Bucket"></a>
The name of the Amazon S3 bucket where Amazon Config stores conformance pack templates.  
This field is optional.
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 63.  
Required: No

 ** [DeliveryS3KeyPrefix](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-DeliveryS3KeyPrefix"></a>
The prefix for the Amazon S3 bucket.   
This field is optional.
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 1024.  
Required: No

 ** [TemplateBody](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-TemplateBody"></a>
A string that contains the full conformance pack template body. The structure containing the template body has a minimum length of 1 byte and a maximum length of 51,200 bytes.  
You can use a YAML template with two resource types: Amazon Config rule (`AWS::Config::ConfigRule`) and remediation action (`AWS::Config::RemediationConfiguration`).
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 51200.  
Required: No

 ** [TemplateS3Uri](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-TemplateS3Uri"></a>
The location of the file containing the template body (`s3://bucketname/prefix`). The uri must point to a conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket in the same Region as the conformance pack.   
You must have access to read Amazon S3 bucket. In addition, in order to ensure a successful deployment, the template object must not be in an [archived storage class](https://docs.amazonaws.cn/AmazonS3/latest/userguide/storage-class-intro.html) if this parameter is passed.
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1024.  
Pattern: `s3://.*`   
Required: No

 ** [TemplateSSMDocumentDetails](#API_PutConformancePack_RequestSyntax) **   <a name="config-PutConformancePack-request-TemplateSSMDocumentDetails"></a>
An object of type `TemplateSSMDocumentDetails`, which contains the name or the Amazon Resource Name (ARN) of the Amazon Systems Manager document (SSM document) and the version of the SSM document that is used to create a conformance pack.  
Type: [TemplateSSMDocumentDetails](API_TemplateSSMDocumentDetails.md) object  
Required: No

## Response Syntax


```
{
   "ConformancePackArn": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ConformancePackArn](#API_PutConformancePack_ResponseSyntax) **   <a name="config-PutConformancePack-response-ConformancePackArn"></a>
ARN of the conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 2048.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ConformancePackTemplateValidationException **   
You have specified a template that is not valid or supported.  
HTTP Status Code: 400

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** MaxNumberOfConformancePacksExceededException **   
You have reached the limit of the number of conformance packs you can create in an account. For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutConformancePack) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutConformancePack) 

# PutDeliveryChannel


Creates or updates a delivery channel to deliver configuration information and other compliance information.

You can use this operation to create a new delivery channel or to update the Amazon S3 bucket and the Amazon SNS topic of an existing delivery channel.

For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/manage-delivery-channel.html](https://docs.amazonaws.cn/config/latest/developerguide/manage-delivery-channel.html) in the * Amazon Config Developer Guide.* 

**Note**  
 **One delivery channel per account per Region**   
You can have only one delivery channel for each account for each Amazon Web Services Region.  
 Delivery channel cannot be cross-Region for the China (Beijing) Region  
 In the China (Beijing) Region, when you call this operation, the Amazon S3 bucket must also be in the China (Beijing) Region. In all the other regions, Amazon Config supports cross-Region and cross-account delivery channels.

## Request Syntax


```
{
   "DeliveryChannel": { 
      "configSnapshotDeliveryProperties": { 
         "deliveryFrequency": "string"
      },
      "name": "string",
      "s3BucketName": "string",
      "s3KeyPrefix": "string",
      "s3KmsKeyArn": "string",
      "snsTopicARN": "string"
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [DeliveryChannel](#API_PutDeliveryChannel_RequestSyntax) **   <a name="config-PutDeliveryChannel-request-DeliveryChannel"></a>
An object for the delivery channel. A delivery channel sends notifications and updated configuration states.   
Type: [DeliveryChannel](API_DeliveryChannel.md) object  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientDeliveryPolicyException **   
Your Amazon S3 bucket policy does not allow Amazon Config to write to it.  
HTTP Status Code: 400

 ** InvalidDeliveryChannelNameException **   
The specified delivery channel name is not valid.  
HTTP Status Code: 400

 ** InvalidS3KeyPrefixException **   
The specified Amazon S3 key prefix is not valid.  
HTTP Status Code: 400

 ** InvalidS3KmsKeyArnException **   
The specified Amazon KMS Key ARN is not valid.  
HTTP Status Code: 400

 ** InvalidSNSTopicARNException **   
The specified Amazon SNS topic does not exist.  
HTTP Status Code: 400

 ** MaxNumberOfDeliveryChannelsExceededException **   
You have reached the limit of the number of delivery channels you can create.  
HTTP Status Code: 400

 ** NoAvailableConfigurationRecorderException **   
There are no customer managed configuration recorders available to record your resources. Use the [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html) operation to create the customer managed configuration recorder.  
HTTP Status Code: 400

 ** NoSuchBucketException **   
The specified Amazon S3 bucket does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutDeliveryChannel) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutDeliveryChannel) 

# PutEvaluations


Used by an Amazon Lambda function to deliver evaluation results to Amazon Config. This operation is required in every Amazon Lambda function that is invoked by an Amazon Config rule.

## Request Syntax


```
{
   "Evaluations": [ 
      { 
         "Annotation": "string",
         "ComplianceResourceId": "string",
         "ComplianceResourceType": "string",
         "ComplianceType": "string",
         "OrderingTimestamp": number
      }
   ],
   "ResultToken": "string",
   "TestMode": boolean
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Evaluations](#API_PutEvaluations_RequestSyntax) **   <a name="config-PutEvaluations-request-Evaluations"></a>
The assessments that the Amazon Lambda function performs. Each evaluation identifies an Amazon resource and indicates whether it complies with the Amazon Config rule that invokes the Amazon Lambda function.  
Type: Array of [Evaluation](API_Evaluation.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 100 items.  
Required: No

 ** [ResultToken](#API_PutEvaluations_RequestSyntax) **   <a name="config-PutEvaluations-request-ResultToken"></a>
An encrypted token that associates an evaluation with an Amazon Config rule. Identifies the rule and the event that triggered the evaluation.  
Type: String  
Required: Yes

 ** [TestMode](#API_PutEvaluations_RequestSyntax) **   <a name="config-PutEvaluations-request-TestMode"></a>
Use this parameter to specify a test run for `PutEvaluations`. You can verify whether your Amazon Lambda function will deliver evaluation results to Amazon Config. No updates occur to your existing evaluations, and evaluation results are not sent to Amazon Config.  
When `TestMode` is `true`, `PutEvaluations` doesn't require a valid value for the `ResultToken` parameter, but the value cannot be null.
Type: Boolean  
Required: No

## Response Syntax


```
{
   "FailedEvaluations": [ 
      { 
         "Annotation": "string",
         "ComplianceResourceId": "string",
         "ComplianceResourceType": "string",
         "ComplianceType": "string",
         "OrderingTimestamp": number
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [FailedEvaluations](#API_PutEvaluations_ResponseSyntax) **   <a name="config-PutEvaluations-response-FailedEvaluations"></a>
Requests that failed because of a client or server error.  
Type: Array of [Evaluation](API_Evaluation.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 100 items.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** InvalidResultTokenException **   
The specified `ResultToken` is not valid.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutEvaluations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutEvaluations) 

# PutExternalEvaluation


Add or updates the evaluations for process checks. This API checks if the rule is a process check when the name of the Amazon Config rule is provided.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "ExternalEvaluation": { 
      "Annotation": "string",
      "ComplianceResourceId": "string",
      "ComplianceResourceType": "string",
      "ComplianceType": "string",
      "OrderingTimestamp": number
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_PutExternalEvaluation_RequestSyntax) **   <a name="config-PutExternalEvaluation-request-ConfigRuleName"></a>
The name of the Amazon Config rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ExternalEvaluation](#API_PutExternalEvaluation_RequestSyntax) **   <a name="config-PutExternalEvaluation-request-ExternalEvaluation"></a>
An `ExternalEvaluation` object that provides details about compliance.  
Type: [ExternalEvaluation](API_ExternalEvaluation.md) object  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutExternalEvaluation) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutExternalEvaluation) 

# PutOrganizationConfigRule


Adds or updates an Amazon Config rule for your entire organization to evaluate if your Amazon resources comply with your desired configurations. For information on how many organization Amazon Config rules you can have per account, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.

 Only a management account and a delegated administrator can create or update an organization Amazon Config rule. When calling this API with a delegated administrator, you must ensure Amazon Organizations `ListDelegatedAdministrator` permissions are added. An organization can have up to 3 delegated administrators.

This API enables organization service access through the `EnableAWSServiceAccess` action and creates a service-linked role `AWSServiceRoleForConfigMultiAccountSetup` in the management or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. Amazon Config verifies the existence of role with `GetRole` action.

To use this API with delegated administrator, register a delegated administrator by calling Amazon Organization `register-delegated-administrator` for `config-multiaccountsetup.amazonaws.com`. 

There are two types of rules: * Amazon Config Managed Rules* and * Amazon Config Custom Rules*. You can use `PutOrganizationConfigRule` to create both Amazon Config Managed Rules and Amazon Config Custom Rules.

 Amazon Config Managed Rules are predefined, customizable rules created by Amazon Config. For a list of managed rules, see [List of Amazon Config Managed Rules](https://docs.amazonaws.cn/config/latest/developerguide/managed-rules-by-aws-config.html). If you are adding an Amazon Config managed rule, you must specify the rule's identifier for the `RuleIdentifier` key.

 Amazon Config Custom Rules are rules that you create from scratch. There are two ways to create Amazon Config custom rules: with Lambda functions ([Amazon Lambda Developer Guide](https://docs.amazonaws.cn/config/latest/developerguide/gettingstarted-concepts.html#gettingstarted-concepts-function)) and with Guard ([Guard GitHub Repository](https://github.com/aws-cloudformation/cloudformation-guard)), a policy-as-code language. Amazon Config custom rules created with Amazon Lambda are called * Amazon Config Custom Lambda Rules* and Amazon Config custom rules created with Guard are called * Amazon Config Custom Policy Rules*.

If you are adding a new Amazon Config Custom Lambda rule, you first need to create an Amazon Lambda function in the management account or a delegated administrator that the rule invokes to evaluate your resources. You also need to create an IAM role in the managed account that can be assumed by the Lambda function. When you use `PutOrganizationConfigRule` to add a Custom Lambda rule to Amazon Config, you must specify the Amazon Resource Name (ARN) that Amazon Lambda assigns to the function.

**Note**  
Prerequisite: Ensure you call `EnableAllFeatures` API to enable all features in an organization.  
Make sure to specify one of either `OrganizationCustomPolicyRuleMetadata` for Custom Policy rules, `OrganizationCustomRuleMetadata` for Custom Lambda rules, or `OrganizationManagedRuleMetadata` for managed rules.

## Request Syntax


```
{
   "ExcludedAccounts": [ "string" ],
   "OrganizationConfigRuleName": "string",
   "OrganizationCustomPolicyRuleMetadata": { 
      "DebugLogDeliveryAccounts": [ "string" ],
      "Description": "string",
      "InputParameters": "string",
      "MaximumExecutionFrequency": "string",
      "OrganizationConfigRuleTriggerTypes": [ "string" ],
      "PolicyRuntime": "string",
      "PolicyText": "string",
      "ResourceIdScope": "string",
      "ResourceTypesScope": [ "string" ],
      "TagKeyScope": "string",
      "TagValueScope": "string"
   },
   "OrganizationCustomRuleMetadata": { 
      "Description": "string",
      "InputParameters": "string",
      "LambdaFunctionArn": "string",
      "MaximumExecutionFrequency": "string",
      "OrganizationConfigRuleTriggerTypes": [ "string" ],
      "ResourceIdScope": "string",
      "ResourceTypesScope": [ "string" ],
      "TagKeyScope": "string",
      "TagValueScope": "string"
   },
   "OrganizationManagedRuleMetadata": { 
      "Description": "string",
      "InputParameters": "string",
      "MaximumExecutionFrequency": "string",
      "ResourceIdScope": "string",
      "ResourceTypesScope": [ "string" ],
      "RuleIdentifier": "string",
      "TagKeyScope": "string",
      "TagValueScope": "string"
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ExcludedAccounts](#API_PutOrganizationConfigRule_RequestSyntax) **   <a name="config-PutOrganizationConfigRule-request-ExcludedAccounts"></a>
A comma-separated list of accounts that you want to exclude from an organization Amazon Config rule.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 1000 items.  
Pattern: `\d{12}`   
Required: No

 ** [OrganizationConfigRuleName](#API_PutOrganizationConfigRule_RequestSyntax) **   <a name="config-PutOrganizationConfigRule-request-OrganizationConfigRuleName"></a>
The name that you assign to an organization Amazon Config rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 64.  
Pattern: `[A-Za-z0-9-_]+`   
Required: Yes

 ** [OrganizationCustomPolicyRuleMetadata](#API_PutOrganizationConfigRule_RequestSyntax) **   <a name="config-PutOrganizationConfigRule-request-OrganizationCustomPolicyRuleMetadata"></a>
An `OrganizationCustomPolicyRuleMetadata` object. This object specifies metadata for your organization's Amazon Config Custom Policy rule. The metadata includes the runtime system in use, which accounts have debug logging enabled, and other custom rule metadata, such as resource type, resource ID of Amazon resource, and organization trigger types that initiate Amazon Config to evaluate Amazon resources against a rule.  
Type: [OrganizationCustomPolicyRuleMetadata](API_OrganizationCustomPolicyRuleMetadata.md) object  
Required: No

 ** [OrganizationCustomRuleMetadata](#API_PutOrganizationConfigRule_RequestSyntax) **   <a name="config-PutOrganizationConfigRule-request-OrganizationCustomRuleMetadata"></a>
An `OrganizationCustomRuleMetadata` object. This object specifies organization custom rule metadata such as resource type, resource ID of Amazon resource, Lambda function ARN, and organization trigger types that trigger Amazon Config to evaluate your Amazon resources against a rule. It also provides the frequency with which you want Amazon Config to run evaluations for the rule if the trigger type is periodic.  
Type: [OrganizationCustomRuleMetadata](API_OrganizationCustomRuleMetadata.md) object  
Required: No

 ** [OrganizationManagedRuleMetadata](#API_PutOrganizationConfigRule_RequestSyntax) **   <a name="config-PutOrganizationConfigRule-request-OrganizationManagedRuleMetadata"></a>
An `OrganizationManagedRuleMetadata` object. This object specifies organization managed rule metadata such as resource type and ID of Amazon resource along with the rule identifier. It also provides the frequency with which you want Amazon Config to run evaluations for the rule if the trigger type is periodic.  
Type: [OrganizationManagedRuleMetadata](API_OrganizationManagedRuleMetadata.md) object  
Required: No

## Response Syntax


```
{
   "OrganizationConfigRuleArn": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [OrganizationConfigRuleArn](#API_PutOrganizationConfigRule_ResponseSyntax) **   <a name="config-PutOrganizationConfigRule-response-OrganizationConfigRuleArn"></a>
The Amazon Resource Name (ARN) of an organization Amazon Config rule.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** MaxNumberOfOrganizationConfigRulesExceededException **   
You have reached the limit of the number of organization Amazon Config rules you can create. For more information, see see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.  
HTTP Status Code: 400

 ** NoAvailableOrganizationException **   
Organization is no longer available.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

 ** OrganizationAllFeaturesNotEnabledException **   
 Amazon Config resource cannot be created because your organization does not have all features enabled.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutOrganizationConfigRule) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutOrganizationConfigRule) 

# PutOrganizationConformancePack


Deploys conformance packs across member accounts in an Amazon Organization. For information on how many organization conformance packs and how many Amazon Config rules you can have per account, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.

Only a management account and a delegated administrator can call this API. When calling this API with a delegated administrator, you must ensure Amazon Organizations `ListDelegatedAdministrator` permissions are added. An organization can have up to 3 delegated administrators.

**Important**  
When you use `PutOrganizationConformancePack` to deploy conformance packs across member accounts, the operation can create Amazon Config rules and remediation actions without requiring `config:PutConfigRule` or `config:PutRemediationConfigurations` permissions in member account IAM policies.  
This API uses the `AWSServiceRoleForConfigConforms` service-linked role in each member account to create conformance pack resources. This service-linked role includes the permissions to create Amazon Config rules and remediation configurations, even if member account IAM policies explicitly deny these actions.

This API enables organization service access for `config-multiaccountsetup.amazonaws.com` through the `EnableAWSServiceAccess` action and creates a service-linked role `AWSServiceRoleForConfigMultiAccountSetup` in the management or delegated administrator account of your organization. The service-linked role is created only when the role does not exist in the caller account. To use this API with delegated administrator, register a delegated administrator by calling Amazon Organization `register-delegate-admin` for `config-multiaccountsetup.amazonaws.com`.

**Note**  
Prerequisite: Ensure you call `EnableAllFeatures` API to enable all features in an organization.  
You must specify either the `TemplateS3Uri` or the `TemplateBody` parameter, but not both. If you provide both Amazon Config uses the `TemplateS3Uri` parameter and ignores the `TemplateBody` parameter.  
 Amazon Config sets the state of a conformance pack to CREATE\$1IN\$1PROGRESS and UPDATE\$1IN\$1PROGRESS until the conformance pack is created or updated. You cannot update a conformance pack while it is in this state.

## Request Syntax


```
{
   "ConformancePackInputParameters": [ 
      { 
         "ParameterName": "string",
         "ParameterValue": "string"
      }
   ],
   "DeliveryS3Bucket": "string",
   "DeliveryS3KeyPrefix": "string",
   "ExcludedAccounts": [ "string" ],
   "OrganizationConformancePackName": "string",
   "TemplateBody": "string",
   "TemplateS3Uri": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConformancePackInputParameters](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-ConformancePackInputParameters"></a>
A list of `ConformancePackInputParameter` objects.  
Type: Array of [ConformancePackInputParameter](API_ConformancePackInputParameter.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 60 items.  
Required: No

 ** [DeliveryS3Bucket](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-DeliveryS3Bucket"></a>
The name of the Amazon S3 bucket where Amazon Config stores conformance pack templates.  
This field is optional. If used, it must be prefixed with `awsconfigconforms`.
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 63.  
Required: No

 ** [DeliveryS3KeyPrefix](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-DeliveryS3KeyPrefix"></a>
The prefix for the Amazon S3 bucket.  
This field is optional.
Type: String  
Length Constraints: Minimum length of 0. Maximum length of 1024.  
Required: No

 ** [ExcludedAccounts](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-ExcludedAccounts"></a>
A list of Amazon Web Services accounts to be excluded from an organization conformance pack while deploying a conformance pack.  
Type: Array of strings  
Array Members: Minimum number of 0 items. Maximum number of 1000 items.  
Pattern: `\d{12}`   
Required: No

 ** [OrganizationConformancePackName](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-OrganizationConformancePackName"></a>
Name of the organization conformance pack you want to create.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[a-zA-Z][-a-zA-Z0-9]*`   
Required: Yes

 ** [TemplateBody](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-TemplateBody"></a>
A string that contains the full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 51200.  
Required: No

 ** [TemplateS3Uri](#API_PutOrganizationConformancePack_RequestSyntax) **   <a name="config-PutOrganizationConformancePack-request-TemplateS3Uri"></a>
Location of file containing the template body. The uri must point to the conformance pack template (max size: 300 KB).  
You must have access to read Amazon S3 bucket. In addition, in order to ensure a successful deployment, the template object must not be in an [archived storage class](https://docs.amazonaws.cn/AmazonS3/latest/userguide/storage-class-intro.html) if this parameter is passed.
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1024.  
Pattern: `s3://.*`   
Required: No

## Response Syntax


```
{
   "OrganizationConformancePackArn": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [OrganizationConformancePackArn](#API_PutOrganizationConformancePack_ResponseSyntax) **   <a name="config-PutOrganizationConformancePack-response-OrganizationConformancePackArn"></a>
ARN of the organization conformance pack.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** MaxNumberOfOrganizationConformancePacksExceededException **   
You have reached the limit of the number of organization conformance packs you can create in an account. For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.  
HTTP Status Code: 400

 ** NoAvailableOrganizationException **   
Organization is no longer available.  
HTTP Status Code: 400

 ** OrganizationAccessDeniedException **   
For `PutConfigurationAggregator` API, you can see this exception for the following reasons:  
+ No permission to call `EnableAWSServiceAccess` API
+ The configuration aggregator cannot be updated because your Amazon Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Organization.
+ The configuration aggregator is associated with a previous Amazon Organization and Amazon Config cannot aggregate data with current Amazon Organization. Delete this aggregator and create a new one with the current Amazon Organization.
+ You are not a registered delegated administrator for Amazon Config with permissions to call `ListDelegatedAdministrators` API. Ensure that the management account registers delagated administrator for Amazon Config service principal name before the delegated administrator creates an aggregator.
For all `OrganizationConfigRule` and `OrganizationConformancePack` APIs, Amazon Config throws an exception if APIs are called from member accounts. All APIs must be called from organization management account.  
HTTP Status Code: 400

 ** OrganizationAllFeaturesNotEnabledException **   
 Amazon Config resource cannot be created because your organization does not have all features enabled.  
HTTP Status Code: 400

 ** OrganizationConformancePackTemplateValidationException **   
You have specified a template that is not valid or supported.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutOrganizationConformancePack) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutOrganizationConformancePack) 

# PutRemediationConfigurations


Adds or updates the remediation configuration with a specific Amazon Config rule with the selected target or action. The API creates the `RemediationConfiguration` object for the Amazon Config rule. The Amazon Config rule must already exist for you to add a remediation configuration. The target (SSM document) must exist and have permissions to use the target. 

**Note**  
 **Be aware of backward incompatible changes**   
If you make backward incompatible changes to the SSM document, you must call this again to ensure the remediations can run.  
This API does not support adding remediation configurations for service-linked Amazon Config Rules such as Organization Amazon Config rules, the rules deployed by conformance packs, and rules deployed by Amazon Security Hub.

**Note**  
 **Required fields**   
For manual remediation configuration, you need to provide a value for `automationAssumeRole` or use a value in the `assumeRole`field to remediate your resources. The SSM automation document can use either as long as it maps to a valid parameter.  
However, for automatic remediation configuration, the only valid `assumeRole` field value is `AutomationAssumeRole` and you need to provide a value for `AutomationAssumeRole` to remediate your resources.

**Note**  
 **Auto remediation can be initiated even for compliant resources**   
If you enable auto remediation for a specific Amazon Config rule using the [PutRemediationConfigurations](https://docs.amazonaws.cn/config/latest/APIReference/emAPI_PutRemediationConfigurations.html) API or the Amazon Config console, it initiates the remediation process for all non-compliant resources for that specific rule. The auto remediation process relies on the compliance data snapshot which is captured on a periodic basis. Any non-compliant resource that is updated between the snapshot schedule will continue to be remediated based on the last known compliance data snapshot.  
This means that in some cases auto remediation can be initiated even for compliant resources, since the bootstrap processor uses a database that can have stale evaluation results based on the last known compliance data snapshot.

## Request Syntax


```
{
   "RemediationConfigurations": [ 
      { 
         "Arn": "string",
         "Automatic": boolean,
         "ConfigRuleName": "string",
         "CreatedByService": "string",
         "ExecutionControls": { 
            "SsmControls": { 
               "ConcurrentExecutionRatePercentage": number,
               "ErrorPercentage": number
            }
         },
         "MaximumAutomaticAttempts": number,
         "Parameters": { 
            "string" : { 
               "ResourceValue": { 
                  "Value": "string"
               },
               "StaticValue": { 
                  "Values": [ "string" ]
               }
            }
         },
         "ResourceType": "string",
         "RetryAttemptSeconds": number,
         "TargetId": "string",
         "TargetType": "string",
         "TargetVersion": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [RemediationConfigurations](#API_PutRemediationConfigurations_RequestSyntax) **   <a name="config-PutRemediationConfigurations-request-RemediationConfigurations"></a>
A list of remediation configuration objects.  
Type: Array of [RemediationConfiguration](API_RemediationConfiguration.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 25 items.  
Required: Yes

## Response Syntax


```
{
   "FailedBatches": [ 
      { 
         "FailedItems": [ 
            { 
               "Arn": "string",
               "Automatic": boolean,
               "ConfigRuleName": "string",
               "CreatedByService": "string",
               "ExecutionControls": { 
                  "SsmControls": { 
                     "ConcurrentExecutionRatePercentage": number,
                     "ErrorPercentage": number
                  }
               },
               "MaximumAutomaticAttempts": number,
               "Parameters": { 
                  "string" : { 
                     "ResourceValue": { 
                        "Value": "string"
                     },
                     "StaticValue": { 
                        "Values": [ "string" ]
                     }
                  }
               },
               "ResourceType": "string",
               "RetryAttemptSeconds": number,
               "TargetId": "string",
               "TargetType": "string",
               "TargetVersion": "string"
            }
         ],
         "FailureMessage": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [FailedBatches](#API_PutRemediationConfigurations_ResponseSyntax) **   <a name="config-PutRemediationConfigurations-response-FailedBatches"></a>
Returns a list of failed remediation batch objects.  
Type: Array of [FailedRemediationBatch](API_FailedRemediationBatch.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutRemediationConfigurations) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutRemediationConfigurations) 

# PutRemediationExceptions


A remediation exception is when a specified resource is no longer considered for auto-remediation. This API adds a new exception or updates an existing exception for a specified resource with a specified Amazon Config rule. 

**Note**  
 **Exceptions block auto remediation**   
 Amazon Config generates a remediation exception when a problem occurs running a remediation action for a specified resource. Remediation exceptions blocks auto-remediation until the exception is cleared.

**Note**  
 **Manual remediation is recommended when placing an exception**   
When placing an exception on an Amazon resource, it is recommended that remediation is set as manual remediation until the given Amazon Config rule for the specified resource evaluates the resource as `NON_COMPLIANT`. Once the resource has been evaluated as `NON_COMPLIANT`, you can add remediation exceptions and change the remediation type back from Manual to Auto if you want to use auto-remediation. Otherwise, using auto-remediation before a `NON_COMPLIANT` evaluation result can delete resources before the exception is applied.

**Note**  
 **Exceptions can only be performed on non-compliant resources**   
Placing an exception can only be performed on resources that are `NON_COMPLIANT`. If you use this API for `COMPLIANT` resources or resources that are `NOT_APPLICABLE`, a remediation exception will not be generated. For more information on the conditions that initiate the possible Amazon Config evaluation results, see [Concepts \$1 Amazon Config Rules](https://docs.amazonaws.cn/config/latest/developerguide/config-concepts.html#aws-config-rules) in the * Amazon Config Developer Guide*.

**Note**  
 **Exceptions cannot be placed on service-linked remediation actions**   
You cannot place an exception on service-linked remediation actions, such as remediation actions put by an organizational conformance pack.

**Note**  
 **Auto remediation can be initiated even for compliant resources**   
If you enable auto remediation for a specific Amazon Config rule using the [PutRemediationConfigurations](https://docs.amazonaws.cn/config/latest/APIReference/emAPI_PutRemediationConfigurations.html) API or the Amazon Config console, it initiates the remediation process for all non-compliant resources for that specific rule. The auto remediation process relies on the compliance data snapshot which is captured on a periodic basis. Any non-compliant resource that is updated between the snapshot schedule will continue to be remediated based on the last known compliance data snapshot.  
This means that in some cases auto remediation can be initiated even for compliant resources, since the bootstrap processor uses a database that can have stale evaluation results based on the last known compliance data snapshot.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "ExpirationTime": number,
   "Message": "string",
   "ResourceKeys": [ 
      { 
         "ResourceId": "string",
         "ResourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_PutRemediationExceptions_RequestSyntax) **   <a name="config-PutRemediationExceptions-request-ConfigRuleName"></a>
The name of the Amazon Config rule for which you want to create remediation exception.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ExpirationTime](#API_PutRemediationExceptions_RequestSyntax) **   <a name="config-PutRemediationExceptions-request-ExpirationTime"></a>
The exception is automatically deleted after the expiration date.  
Type: Timestamp  
Required: No

 ** [Message](#API_PutRemediationExceptions_RequestSyntax) **   <a name="config-PutRemediationExceptions-request-Message"></a>
The message contains an explanation of the exception.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1024.  
Required: No

 ** [ResourceKeys](#API_PutRemediationExceptions_RequestSyntax) **   <a name="config-PutRemediationExceptions-request-ResourceKeys"></a>
An exception list of resource exception keys to be processed with the current request. Amazon Config adds exception for each resource key. For example, Amazon Config adds 3 exceptions for 3 resource keys.   
Type: Array of [RemediationExceptionResourceKey](API_RemediationExceptionResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: Yes

## Response Syntax


```
{
   "FailedBatches": [ 
      { 
         "FailedItems": [ 
            { 
               "ConfigRuleName": "string",
               "ExpirationTime": number,
               "Message": "string",
               "ResourceId": "string",
               "ResourceType": "string"
            }
         ],
         "FailureMessage": "string"
      }
   ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [FailedBatches](#API_PutRemediationExceptions_ResponseSyntax) **   <a name="config-PutRemediationExceptions-response-FailedBatches"></a>
Returns a list of failed remediation exceptions batch objects. Each object in the batch consists of a list of failed items and failure messages.  
Type: Array of [FailedRemediationExceptionBatch](API_FailedRemediationExceptionBatch.md) objects

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutRemediationExceptions) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutRemediationExceptions) 

# PutResourceConfig


Records the configuration state for the resource provided in the request. The configuration state of a resource is represented in Amazon Config as Configuration Items. Once this API records the configuration item, you can retrieve the list of configuration items for the custom resource type using existing Amazon Config APIs. 

**Note**  
The custom resource type must be registered with Amazon CloudFormation. This API accepts the configuration item registered with Amazon CloudFormation.  
When you call this API, Amazon Config only stores configuration state of the resource provided in the request. This API does not change or remediate the configuration of the resource.   
Write-only schema properites are not recorded as part of the published configuration item.

## Request Syntax


```
{
   "Configuration": "string",
   "ResourceId": "string",
   "ResourceName": "string",
   "ResourceType": "string",
   "SchemaVersionId": "string",
   "Tags": { 
      "string" : "string" 
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Configuration](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-Configuration"></a>
The configuration object of the resource in valid JSON format. It must match the schema registered with Amazon CloudFormation.  
The configuration JSON must not exceed 64 KB.
Type: String  
Required: Yes

 ** [ResourceId](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-ResourceId"></a>
Unique identifier of the resource.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 768.  
Required: Yes

 ** [ResourceName](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-ResourceName"></a>
Name of the resource.  
Type: String  
Required: No

 ** [ResourceType](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-ResourceType"></a>
The type of the resource. The custom resource type must be registered with Amazon CloudFormation.   
You cannot use the organization names “amzn”, “amazon”, “alexa”, “custom” with custom resource types. It is the first part of the ResourceType up to the first ::.
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 196.  
Required: Yes

 ** [SchemaVersionId](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-SchemaVersionId"></a>
Version of the schema registered for the ResourceType in Amazon CloudFormation.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[A-Za-z0-9-]+`   
Required: Yes

 ** [Tags](#API_PutResourceConfig_RequestSyntax) **   <a name="config-PutResourceConfig-request-Tags"></a>
Tags associated with the resource.  
This field is not to be confused with the Amazon-wide tag feature for Amazon resources. Tags for `PutResourceConfig` are tags that you supply for the configuration items of your custom resources.
Type: String to string map  
Required: No

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** MaxActiveResourcesExceededException **   
You have reached the limit of active custom resource types in your account. There is a limit of 100,000. Delete unused resources using [DeleteResourceConfig](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteResourceConfig.html) ``.  
HTTP Status Code: 400

 ** NoRunningConfigurationRecorderException **   
There is no configuration recorder running.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutResourceConfig) 

# PutRetentionConfiguration


Creates and updates the retention configuration with details about retention period (number of days) that Amazon Config stores your historical information. The API creates the `RetentionConfiguration` object and names the object as **default**. When you have a `RetentionConfiguration` object named **default**, calling the API modifies the default object. 

**Note**  
Currently, Amazon Config supports only one retention configuration per region in your account.

## Request Syntax


```
{
   "RetentionPeriodInDays": number
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [RetentionPeriodInDays](#API_PutRetentionConfiguration_RequestSyntax) **   <a name="config-PutRetentionConfiguration-request-RetentionPeriodInDays"></a>
Number of days Amazon Config stores your historical information.  
Currently, only applicable to the configuration item history.
Type: Integer  
Valid Range: Minimum value of 30. Maximum value of 2557.  
Required: Yes

## Response Syntax


```
{
   "RetentionConfiguration": { 
      "Name": "string",
      "RetentionPeriodInDays": number
   }
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [RetentionConfiguration](#API_PutRetentionConfiguration_ResponseSyntax) **   <a name="config-PutRetentionConfiguration-response-RetentionConfiguration"></a>
Returns a retention configuration object.  
Type: [RetentionConfiguration](API_RetentionConfiguration.md) object

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** MaxNumberOfRetentionConfigurationsExceededException **   
Failed to add the retention configuration because a retention configuration with that name already exists.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutRetentionConfiguration) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutRetentionConfiguration) 

# PutServiceLinkedConfigurationRecorder


Creates a service-linked configuration recorder that is linked to a specific Amazon Web Services service based on the `ServicePrincipal` you specify.

The configuration recorder's `name`, `recordingGroup`, `recordingMode`, and `recordingScope` is set by the service that is linked to the configuration recorder.

For more information and a list of supported services/service principals, see [https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html](https://docs.amazonaws.cn/config/latest/developerguide/stop-start-recorder.html) in the * Amazon Config Developer Guide*.

This API creates a service-linked role `AWSServiceRoleForConfig` in your account. The service-linked role is created only when the role does not exist in your account.

**Note**  
 **The recording scope determines if you receive configuration items**   
The recording scope is set by the service that is linked to the configuration recorder and determines whether you receive configuration items (CIs) in the delivery channel. If the recording scope is internal, you will not receive CIs in the delivery channel.  
 **Tags are added at creation and cannot be updated with this operation**   
Use [TagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_TagResource.html) and [UntagResource](https://docs.amazonaws.cn/config/latest/APIReference/API_UntagResource.html) to update tags after creation.

## Request Syntax


```
{
   "ServicePrincipal": "string",
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ServicePrincipal](#API_PutServiceLinkedConfigurationRecorder_RequestSyntax) **   <a name="config-PutServiceLinkedConfigurationRecorder-request-ServicePrincipal"></a>
The service principal of the Amazon Web Services service for the service-linked configuration recorder that you want to create.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `[\w+=,.@-]+`   
Required: Yes

 ** [Tags](#API_PutServiceLinkedConfigurationRecorder_RequestSyntax) **   <a name="config-PutServiceLinkedConfigurationRecorder-request-Tags"></a>
The tags for a service-linked configuration recorder. Each tag consists of a key and an optional value, both of which you define.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Syntax


```
{
   "Arn": "string",
   "Name": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [Arn](#API_PutServiceLinkedConfigurationRecorder_ResponseSyntax) **   <a name="config-PutServiceLinkedConfigurationRecorder-response-Arn"></a>
The Amazon Resource Name (ARN) of the specified configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.

 ** [Name](#API_PutServiceLinkedConfigurationRecorder_ResponseSyntax) **   <a name="config-PutServiceLinkedConfigurationRecorder-response-Name"></a>
The name of the specified configuration recorder.  
For service-linked configuration recorders, Amazon Config automatically assigns a name that has the prefix "`AWSConfigurationRecorderFor`" to the new service-linked configuration recorder.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ConflictException **   
For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), you cannot create a service-linked recorder because a service-linked recorder already exists for the specified service.  
For [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html), you cannot delete the service-linked recorder because it is currently in use by the linked Amazon Web Services service.  
For [DeleteDeliveryChannel](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteDeliveryChannel.html), you cannot delete the specified delivery channel because the customer managed configuration recorder is running. Use the [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html) operation to stop the customer managed configuration recorder.  
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ For service-linked configuration recorders, the configuration recorder is not in use by the service. No association or dissociation of resource types is permitted.
+ For service-linked configuration recorders, your requested change to the configuration recorder has been denied by its linked Amazon Web Services service.
HTTP Status Code: 400

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** LimitExceededException **   
For `PutServiceLinkedConfigurationRecorder` API, this exception is thrown if the number of service-linked roles in the account exceeds the limit.  
For `StartConfigRulesEvaluation` API, this exception is thrown if an evaluation is in progress or if you call the [StartConfigRulesEvaluation](API_StartConfigRulesEvaluation.md) API more than once per minute.  
For `PutConfigurationAggregator` API, this exception is thrown if the number of accounts and aggregators exceeds the limit.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutServiceLinkedConfigurationRecorder) 

# PutStoredQuery


Saves a new query or updates an existing saved query. The `QueryName` must be unique for a single Amazon Web Services account and a single Amazon Web Services Region. You can create upto 300 queries in a single Amazon Web Services account and a single Amazon Web Services Region.

**Note**  
 **Tags are added at creation and cannot be updated**   
 `PutStoredQuery` is an idempotent API. Subsequent requests won’t create a duplicate resource if one was already created. If a following request has different `tags` values, Amazon Config will ignore these differences and treat it as an idempotent request of the previous. In this case, `tags` will not be updated, even if they are different.

## Request Syntax


```
{
   "StoredQuery": { 
      "Description": "string",
      "Expression": "string",
      "QueryArn": "string",
      "QueryId": "string",
      "QueryName": "string"
   },
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [StoredQuery](#API_PutStoredQuery_RequestSyntax) **   <a name="config-PutStoredQuery-request-StoredQuery"></a>
A list of `StoredQuery` objects. The mandatory fields are `QueryName` and `Expression`.  
When you are creating a query, you must provide a query name and an expression. When you are updating a query, you must provide a query name but updating the description is optional.
Type: [StoredQuery](API_StoredQuery.md) object  
Required: Yes

 ** [Tags](#API_PutStoredQuery_RequestSyntax) **   <a name="config-PutStoredQuery-request-Tags"></a>
A list of `Tags` object.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 0 items. Maximum number of 50 items.  
Required: No

## Response Syntax


```
{
   "QueryArn": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [QueryArn](#API_PutStoredQuery_ResponseSyntax) **   <a name="config-PutStoredQuery-response-QueryArn"></a>
Amazon Resource Name (ARN) of the query. For example, arn:partition:service:region:account-id:resource-type/resource-name/resource-id.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 500.  
Pattern: `^arn:aws[a-z\-]*:config:[a-z\-\d]+:\d+:stored-query/[a-zA-Z0-9-_]+/query-[a-zA-Z\d-_/]+$` 

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceConcurrentModificationException **   
Two users are trying to modify the same query at the same time. Wait for a moment and try again.  
HTTP Status Code: 400

 ** TooManyTagsException **   
You have reached the limit of the number of tags you can use. For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/PutStoredQuery) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/PutStoredQuery) 

# SelectAggregateResourceConfig


Accepts a structured query language (SQL) SELECT command and an aggregator to query configuration state of Amazon resources across multiple accounts and regions, performs the corresponding search, and returns resource configurations matching the properties.

For more information about query components, see the [https://docs.amazonaws.cn/config/latest/developerguide/query-components.html](https://docs.amazonaws.cn/config/latest/developerguide/query-components.html) section in the * Amazon Config Developer Guide*.

**Note**  
If you run an aggregation query (i.e., using `GROUP BY` or using aggregate functions such as `COUNT`; e.g., `SELECT resourceId, COUNT(*) WHERE resourceType = 'AWS::IAM::Role' GROUP BY resourceId`) and do not specify the `MaxResults` or the `Limit` query parameters, the default page size is set to 500.  
If you run a non-aggregation query (i.e., not using `GROUP BY` or aggregate function; e.g., `SELECT * WHERE resourceType = 'AWS::IAM::Role'`) and do not specify the `MaxResults` or the `Limit` query parameters, the default page size is set to 25.

## Request Syntax


```
{
   "ConfigurationAggregatorName": "string",
   "Expression": "string",
   "Limit": number,
   "MaxResults": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationAggregatorName](#API_SelectAggregateResourceConfig_RequestSyntax) **   <a name="config-SelectAggregateResourceConfig-request-ConfigurationAggregatorName"></a>
The name of the configuration aggregator.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Pattern: `[\w\-]+`   
Required: Yes

 ** [Expression](#API_SelectAggregateResourceConfig_RequestSyntax) **   <a name="config-SelectAggregateResourceConfig-request-Expression"></a>
The SQL query SELECT command.   
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 4096.  
Required: Yes

 ** [Limit](#API_SelectAggregateResourceConfig_RequestSyntax) **   <a name="config-SelectAggregateResourceConfig-request-Limit"></a>
The maximum number of query results returned on each page.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [MaxResults](#API_SelectAggregateResourceConfig_RequestSyntax) **   <a name="config-SelectAggregateResourceConfig-request-MaxResults"></a>
The maximum number of query results returned on each page. Amazon Config also allows the Limit request parameter.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_SelectAggregateResourceConfig_RequestSyntax) **   <a name="config-SelectAggregateResourceConfig-request-NextToken"></a>
The nextToken string returned in a previous request that you use to request the next page of results in a paginated response.   
Type: String  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "QueryInfo": { 
      "SelectFields": [ 
         { 
            "Name": "string"
         }
      ]
   },
   "Results": [ "string" ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_SelectAggregateResourceConfig_ResponseSyntax) **   <a name="config-SelectAggregateResourceConfig-response-NextToken"></a>
The nextToken string returned in a previous request that you use to request the next page of results in a paginated response.   
Type: String

 ** [QueryInfo](#API_SelectAggregateResourceConfig_ResponseSyntax) **   <a name="config-SelectAggregateResourceConfig-response-QueryInfo"></a>
Details about the query.  
Type: [QueryInfo](API_QueryInfo.md) object

 ** [Results](#API_SelectAggregateResourceConfig_ResponseSyntax) **   <a name="config-SelectAggregateResourceConfig-response-Results"></a>
Returns the results for the SQL query.  
Type: Array of strings

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidExpressionException **   
The syntax of the query is incorrect.  
HTTP Status Code: 400

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

 ** NoSuchConfigurationAggregatorException **   
You have specified a configuration aggregator that does not exist.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/SelectAggregateResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/SelectAggregateResourceConfig) 

# SelectResourceConfig


Accepts a structured query language (SQL) `SELECT` command, performs the corresponding search, and returns resource configurations matching the properties.

For more information about query components, see the [https://docs.amazonaws.cn/config/latest/developerguide/query-components.html](https://docs.amazonaws.cn/config/latest/developerguide/query-components.html) section in the * Amazon Config Developer Guide*.

## Request Syntax


```
{
   "Expression": "string",
   "Limit": number,
   "NextToken": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [Expression](#API_SelectResourceConfig_RequestSyntax) **   <a name="config-SelectResourceConfig-request-Expression"></a>
The SQL query `SELECT` command.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 4096.  
Required: Yes

 ** [Limit](#API_SelectResourceConfig_RequestSyntax) **   <a name="config-SelectResourceConfig-request-Limit"></a>
The maximum number of query results returned on each page.   
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 100.  
Required: No

 ** [NextToken](#API_SelectResourceConfig_RequestSyntax) **   <a name="config-SelectResourceConfig-request-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.   
Type: String  
Required: No

## Response Syntax


```
{
   "NextToken": "string",
   "QueryInfo": { 
      "SelectFields": [ 
         { 
            "Name": "string"
         }
      ]
   },
   "Results": [ "string" ]
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [NextToken](#API_SelectResourceConfig_ResponseSyntax) **   <a name="config-SelectResourceConfig-response-NextToken"></a>
The `nextToken` string returned in a previous request that you use to request the next page of results in a paginated response.   
Type: String

 ** [QueryInfo](#API_SelectResourceConfig_ResponseSyntax) **   <a name="config-SelectResourceConfig-response-QueryInfo"></a>
Returns the `QueryInfo` object.  
Type: [QueryInfo](API_QueryInfo.md) object

 ** [Results](#API_SelectResourceConfig_ResponseSyntax) **   <a name="config-SelectResourceConfig-response-Results"></a>
Returns the results for the SQL query.  
Type: Array of strings

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidExpressionException **   
The syntax of the query is incorrect.  
HTTP Status Code: 400

 ** InvalidLimitException **   
The specified limit is outside the allowable range.  
HTTP Status Code: 400

 ** InvalidNextTokenException **   
The specified next token is not valid. Specify the `nextToken` string that was returned in the previous response to get the next page of results.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/SelectResourceConfig) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/SelectResourceConfig) 

# StartConfigRulesEvaluation


Runs an on-demand evaluation for the specified Amazon Config rules against the last known configuration state of the resources. Use `StartConfigRulesEvaluation` when you want to test that a rule you updated is working as expected. `StartConfigRulesEvaluation` does not re-record the latest configuration state for your resources. It re-runs an evaluation against the last known state of your resources. 

You can specify up to 25 Amazon Config rules per request. 

An existing `StartConfigRulesEvaluation` call for the specified rules must complete before you can call the API again. If you chose to have Amazon Config stream to an Amazon SNS topic, you will receive a `ConfigRuleEvaluationStarted` notification when the evaluation starts.

**Note**  
You don't need to call the `StartConfigRulesEvaluation` API to run an evaluation for a new rule. When you create a rule, Amazon Config evaluates your resources against the rule automatically. 

The `StartConfigRulesEvaluation` API is useful if you want to run on-demand evaluations, such as the following example:

1. You have a custom rule that evaluates your IAM resources every 24 hours.

1. You update your Lambda function to add additional conditions to your rule.

1. Instead of waiting for the next periodic evaluation, you call the `StartConfigRulesEvaluation` API.

1.  Amazon Config invokes your Lambda function and evaluates your IAM resources.

1. Your custom rule will still run periodic evaluations every 24 hours.

## Request Syntax


```
{
   "ConfigRuleNames": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleNames](#API_StartConfigRulesEvaluation_RequestSyntax) **   <a name="config-StartConfigRulesEvaluation-request-ConfigRuleNames"></a>
The list of names of Amazon Config rules that you want to run evaluations for.  
Type: Array of strings  
Array Members: Minimum number of 1 item. Maximum number of 25 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: No

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** LimitExceededException **   
For `PutServiceLinkedConfigurationRecorder` API, this exception is thrown if the number of service-linked roles in the account exceeds the limit.  
For `StartConfigRulesEvaluation` API, this exception is thrown if an evaluation is in progress or if you call the [StartConfigRulesEvaluation](#API_StartConfigRulesEvaluation) API more than once per minute.  
For `PutConfigurationAggregator` API, this exception is thrown if the number of accounts and aggregators exceeds the limit.  
HTTP Status Code: 400

 ** NoSuchConfigRuleException **   
The Amazon Config rule in the request is not valid. Verify that the rule is an Amazon Config Process Check rule, that the rule name is correct, and that valid Amazon Resouce Names (ARNs) are used before trying again.  
HTTP Status Code: 400

 ** ResourceInUseException **   
You see this exception in the following cases:   
+ For DeleteConfigRule, Amazon Config is deleting this rule. Try your request again later.
+ For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
+ For DeleteConfigRule, a remediation action is associated with the rule and Amazon Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
+ For PutConfigOrganizationRule, organization Amazon Config rule deletion is in progress. Try your request again later.
+ For DeleteOrganizationConfigRule, organization Amazon Config rule creation is in progress. Try your request again later.
+ For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
+ For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/StartConfigRulesEvaluation) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/StartConfigRulesEvaluation) 

# StartConfigurationRecorder


Starts the customer managed configuration recorder. The customer managed configuration recorder will begin recording configuration changes for the resource types you specify.

You must have created a delivery channel to successfully start the customer managed configuration recorder. You can use the [PutDeliveryChannel](https://docs.amazonaws.cn/config/latest/APIReference/API_PutDeliveryChannel.html) operation to create a delivery channel.

## Request Syntax


```
{
   "ConfigurationRecorderName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorderName](#API_StartConfigurationRecorder_RequestSyntax) **   <a name="config-StartConfigurationRecorder-request-ConfigurationRecorderName"></a>
The name of the customer managed configuration recorder that you want to start.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** NoAvailableDeliveryChannelException **   
There is no delivery channel available to record configurations.  
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** UnmodifiableEntityException **   
The requested operation is not valid.  
For [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html), you will see this exception because you cannot use this operation to create a service-linked configuration recorder. Use the [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html) operation to create a service-linked configuration recorder.  
For [DeleteConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteConfigurationRecorder.html), you will see this exception because you cannot use this operation to delete a service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
For [StartConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StartConfigurationRecorder.html) and [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html), you will see this exception because these operations do not affect service-linked configuration recorders. Service-linked configuration recorders are always recording. To stop recording, you must delete the service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/StartConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/StartConfigurationRecorder) 

# StartRemediationExecution


Runs an on-demand remediation for the specified Amazon Config rules against the last known remediation configuration. It runs an execution against the current state of your resources. Remediation execution is asynchronous.

You can specify up to 100 resource keys per request. An existing StartRemediationExecution call for the specified resource keys must complete before you can call the API again.

## Request Syntax


```
{
   "ConfigRuleName": "string",
   "ResourceKeys": [ 
      { 
         "resourceId": "string",
         "resourceType": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigRuleName](#API_StartRemediationExecution_RequestSyntax) **   <a name="config-StartRemediationExecution-request-ConfigRuleName"></a>
The list of names of Amazon Config rules that you want to run remediation execution for.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Pattern: `.*\S.*`   
Required: Yes

 ** [ResourceKeys](#API_StartRemediationExecution_RequestSyntax) **   <a name="config-StartRemediationExecution-request-ResourceKeys"></a>
A list of resource keys to be processed with the current request. Each element in the list consists of the resource type and resource ID.   
Type: Array of [ResourceKey](API_ResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.  
Required: Yes

## Response Syntax


```
{
   "FailedItems": [ 
      { 
         "resourceId": "string",
         "resourceType": "string"
      }
   ],
   "FailureMessage": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [FailedItems](#API_StartRemediationExecution_ResponseSyntax) **   <a name="config-StartRemediationExecution-response-FailedItems"></a>
For resources that have failed to start execution, the API returns a resource key object.  
Type: Array of [ResourceKey](API_ResourceKey.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 100 items.

 ** [FailureMessage](#API_StartRemediationExecution_ResponseSyntax) **   <a name="config-StartRemediationExecution-response-FailureMessage"></a>
Returns a failure message. For example, the resource is already compliant.  
Type: String

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InsufficientPermissionsException **   
Indicates one of the following errors:  
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the rule cannot be created because the IAM role assigned to Amazon Config lacks permissions to perform the config:Put\$1 action.
+ For [PutConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigRule.html), the Amazon Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
+ For [PutOrganizationConfigRule](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConfigRule.html), organization Amazon Config rule cannot be created because you do not have permissions to call IAM `GetRole` action or create a service-linked role.
+ For [PutConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConformancePack.html) and [PutOrganizationConformancePack](https://docs.amazonaws.cn/config/latest/APIReference/API_PutOrganizationConformancePack.html), a conformance pack cannot be created because you do not have the following permissions: 
  + You do not have permission to call IAM `GetRole` action or create a service-linked role.
  + You do not have permission to read Amazon S3 bucket or call SSM:GetDocument.
+ For [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html), a service-linked configuration recorder cannot be created because you do not have the following permissions: IAM `CreateServiceLinkedRole`.
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

 ** NoSuchRemediationConfigurationException **   
You specified an Amazon Config rule without a remediation configuration.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/StartRemediationExecution) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/StartRemediationExecution) 

# StartResourceEvaluation


Runs an on-demand evaluation for the specified resource to determine whether the resource details will comply with configured Amazon Config rules. You can also use it for evaluation purposes. Amazon Config recommends using an evaluation context. It runs an execution against the resource details with all of the Amazon Config rules in your account that match with the specified proactive mode and resource type.

**Note**  
Ensure you have the `cloudformation:DescribeType` role setup to validate the resource type schema.  
You can find the [Resource type schema](https://docs.amazonaws.cn/cloudformation-cli/latest/userguide/resource-type-schema.html) in "* Amazon public extensions*" within the Amazon CloudFormation registry or with the following CLI commmand: `aws cloudformation describe-type --type-name "AWS::S3::Bucket" --type RESOURCE`.  
For more information, see [Managing extensions through the Amazon CloudFormation registry](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/registry.html#registry-view) and [Amazon resource and property types reference](https://docs.amazonaws.cn/AWSCloudFormation/latest/UserGuide/aws-template-resource-type-ref.html) in the Amazon CloudFormation User Guide.

## Request Syntax


```
{
   "ClientToken": "string",
   "EvaluationContext": { 
      "EvaluationContextIdentifier": "string"
   },
   "EvaluationMode": "string",
   "EvaluationTimeout": number,
   "ResourceDetails": { 
      "ResourceConfiguration": "string",
      "ResourceConfigurationSchemaType": "string",
      "ResourceId": "string",
      "ResourceType": "string"
   }
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ClientToken](#API_StartResourceEvaluation_RequestSyntax) **   <a name="config-StartResourceEvaluation-request-ClientToken"></a>
A client token is a unique, case-sensitive string of up to 64 ASCII characters. To make an idempotent API request using one of these actions, specify a client token in the request.  
Avoid reusing the same client token for other API requests. If you retry a request that completed successfully using the same client token and the same parameters, the retry succeeds without performing any further actions. If you retry a successful request using the same client token, but one or more of the parameters are different, other than the Region or Availability Zone, the retry fails with an IdempotentParameterMismatch error.
Type: String  
Length Constraints: Minimum length of 64. Maximum length of 256.  
Required: No

 ** [EvaluationContext](#API_StartResourceEvaluation_RequestSyntax) **   <a name="config-StartResourceEvaluation-request-EvaluationContext"></a>
Returns an `EvaluationContext` object.  
Type: [EvaluationContext](API_EvaluationContext.md) object  
Required: No

 ** [EvaluationMode](#API_StartResourceEvaluation_RequestSyntax) **   <a name="config-StartResourceEvaluation-request-EvaluationMode"></a>
The mode of an evaluation. The valid values for this API are `DETECTIVE` and `PROACTIVE`.  
Type: String  
Valid Values: `DETECTIVE | PROACTIVE`   
Required: Yes

 ** [EvaluationTimeout](#API_StartResourceEvaluation_RequestSyntax) **   <a name="config-StartResourceEvaluation-request-EvaluationTimeout"></a>
The timeout for an evaluation. The default is 900 seconds. You cannot specify a number greater than 3600. If you specify 0, Amazon Config uses the default.  
Type: Integer  
Valid Range: Minimum value of 0. Maximum value of 3600.  
Required: No

 ** [ResourceDetails](#API_StartResourceEvaluation_RequestSyntax) **   <a name="config-StartResourceEvaluation-request-ResourceDetails"></a>
Returns a `ResourceDetails` object.  
Type: [ResourceDetails](API_ResourceDetails.md) object  
Required: Yes

## Response Syntax


```
{
   "ResourceEvaluationId": "string"
}
```

## Response Elements


If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.

 ** [ResourceEvaluationId](#API_StartResourceEvaluation_ResponseSyntax) **   <a name="config-StartResourceEvaluation-response-ResourceEvaluationId"></a>
A unique ResourceEvaluationId that is associated with a single execution.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 128.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** IdempotentParameterMismatch **   
Using the same client token with one or more different parameters. Specify a new client token with the parameter changes and try again.  
HTTP Status Code: 400

 ** InvalidParameterValueException **   
One or more of the specified parameters are not valid. Verify that your parameters are valid and try again.  
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/StartResourceEvaluation) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/StartResourceEvaluation) 

# StopConfigurationRecorder


Stops the customer managed configuration recorder. The customer managed configuration recorder will stop recording configuration changes for the resource types you have specified.

## Request Syntax


```
{
   "ConfigurationRecorderName": "string"
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ConfigurationRecorderName](#API_StopConfigurationRecorder_RequestSyntax) **   <a name="config-StopConfigurationRecorder-request-ConfigurationRecorderName"></a>
The name of the customer managed configuration recorder that you want to stop.  
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 256.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** InvalidConfigurationRecorderNameException **   
The configuration recorder name is not valid. The prefix "`AWSConfigurationRecorderFor`" is reserved for service-linked configuration recorders.  
HTTP Status Code: 400

 ** NoSuchConfigurationRecorderException **   
You have specified a configuration recorder that does not exist.  
HTTP Status Code: 400

 ** UnmodifiableEntityException **   
The requested operation is not valid.  
For [PutConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutConfigurationRecorder.html), you will see this exception because you cannot use this operation to create a service-linked configuration recorder. Use the [PutServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_PutServiceLinkedConfigurationRecorder.html) operation to create a service-linked configuration recorder.  
For [DeleteConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteConfigurationRecorder.html), you will see this exception because you cannot use this operation to delete a service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
For [StartConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StartConfigurationRecorder.html) and [StopConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_StopConfigurationRecorder.html), you will see this exception because these operations do not affect service-linked configuration recorders. Service-linked configuration recorders are always recording. To stop recording, you must delete the service-linked configuration recorder. Use the [DeleteServiceLinkedConfigurationRecorder](https://docs.amazonaws.cn/config/latest/APIReference/API_DeleteServiceLinkedConfigurationRecorder.html) operation to delete a service-linked configuration recorder.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/StopConfigurationRecorder) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/StopConfigurationRecorder) 

# TagResource


Associates the specified tags to a resource with the specified `ResourceArn`. If existing tags on a resource are not specified in the request parameters, they are not changed. If existing tags are specified, however, then their values will be updated. When a resource is deleted, the tags associated with that resource are deleted as well.

## Request Syntax


```
{
   "ResourceArn": "string",
   "Tags": [ 
      { 
         "Key": "string",
         "Value": "string"
      }
   ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ResourceArn](#API_TagResource_RequestSyntax) **   <a name="config-TagResource-request-ResourceArn"></a>
The Amazon Resource Name (ARN) that identifies the resource for which to list the tags. The following resources are supported:  
+  `ConfigurationRecorder` 
+  `ConfigRule` 
+  `OrganizationConfigRule` 
+  `ConformancePack` 
+  `OrganizationConformancePack` 
+  `ConfigurationAggregator` 
+  `AggregationAuthorization` 
+  `StoredQuery` 
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: Yes

 ** [Tags](#API_TagResource_RequestSyntax) **   <a name="config-TagResource-request-Tags"></a>
An array of tag object.  
Type: Array of [Tag](API_Tag.md) objects  
Array Members: Minimum number of 1 item. Maximum number of 50 items.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

 ** TooManyTagsException **   
You have reached the limit of the number of tags you can use. For more information, see [https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html](https://docs.amazonaws.cn/config/latest/developerguide/configlimits.html) in the * Amazon Config Developer Guide*.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/TagResource) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/TagResource) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/TagResource) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/TagResource) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/TagResource) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/TagResource) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/TagResource) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/TagResource) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/TagResource) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/TagResource) 

# UntagResource


Deletes specified tags from a resource.

## Request Syntax


```
{
   "ResourceArn": "string",
   "TagKeys": [ "string" ]
}
```

## Request Parameters


For information about the parameters that are common to all actions, see [Common Parameters](CommonParameters.md).

The request accepts the following data in JSON format.

 ** [ResourceArn](#API_UntagResource_RequestSyntax) **   <a name="config-UntagResource-request-ResourceArn"></a>
The Amazon Resource Name (ARN) that identifies the resource for which to list the tags. The following resources are supported:  
+  `ConfigurationRecorder` 
+  `ConfigRule` 
+  `OrganizationConfigRule` 
+  `ConformancePack` 
+  `OrganizationConformancePack` 
+  `ConfigurationAggregator` 
+  `AggregationAuthorization` 
+  `StoredQuery` 
Type: String  
Length Constraints: Minimum length of 1. Maximum length of 1000.  
Required: Yes

 ** [TagKeys](#API_UntagResource_RequestSyntax) **   <a name="config-UntagResource-request-TagKeys"></a>
The keys of the tags to be removed.  
Type: Array of strings  
Array Members: Minimum number of 1 item. Maximum number of 50 items.  
Length Constraints: Minimum length of 1. Maximum length of 128.  
Required: Yes

## Response Elements


If the action is successful, the service sends back an HTTP 200 response with an empty HTTP body.

## Errors


For information about the errors that are common to all actions, see [Common Error Types](CommonErrors.md).

 ** ResourceNotFoundException **   
You have specified a resource that does not exist.  
HTTP Status Code: 400

 ** ValidationException **   
The requested operation is not valid. You will see this exception if there are missing required fields or if the input value fails the validation.  
For [PutStoredQuery](https://docs.amazonaws.cn/config/latest/APIReference/API_PutStoredQuery.html), one of the following errors:  
+ There are missing required fields.
+ The input value fails the validation.
+ You are trying to create more than 300 queries.
For [DescribeConfigurationRecorders](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorders.html) and [DescribeConfigurationRecorderStatus](https://docs.amazonaws.cn/config/latest/APIReference/API_DescribeConfigurationRecorderStatus.html), one of the following errors:  
+ You have specified more than one configuration recorder.
+ You have provided a service principal for service-linked configuration recorder that is not valid.
For [AssociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_AssociateResourceTypes.html) and [DisassociateResourceTypes](https://docs.amazonaws.cn/config/latest/APIReference/API_DisassociateResourceTypes.html), one of the following errors:  
+ Your configuraiton recorder has a recording strategy that does not allow the association or disassociation of resource types.
+ One or more of the specified resource types are already associated or disassociated with the configuration recorder.
+ For service-linked configuration recorders, the configuration recorder does not record one or more of the specified resource types.
HTTP Status Code: 400

## See Also


For more information about using this API in one of the language-specific Amazon SDKs, see the following:
+  [Amazon Command Line Interface V2](https://docs.amazonaws.cn/goto/cli2/config-2014-11-12/UntagResource) 
+  [Amazon SDK for .NET V4](https://docs.amazonaws.cn/goto/DotNetSDKV4/config-2014-11-12/UntagResource) 
+  [Amazon SDK for C\$1\$1](https://docs.amazonaws.cn/goto/SdkForCpp/config-2014-11-12/UntagResource) 
+  [Amazon SDK for Go v2](https://docs.amazonaws.cn/goto/SdkForGoV2/config-2014-11-12/UntagResource) 
+  [Amazon SDK for Java V2](https://docs.amazonaws.cn/goto/SdkForJavaV2/config-2014-11-12/UntagResource) 
+  [Amazon SDK for JavaScript V3](https://docs.amazonaws.cn/goto/SdkForJavaScriptV3/config-2014-11-12/UntagResource) 
+  [Amazon SDK for Kotlin](https://docs.amazonaws.cn/goto/SdkForKotlin/config-2014-11-12/UntagResource) 
+  [Amazon SDK for PHP V3](https://docs.amazonaws.cn/goto/SdkForPHPV3/config-2014-11-12/UntagResource) 
+  [Amazon SDK for Python](https://docs.amazonaws.cn/goto/boto3/config-2014-11-12/UntagResource) 
+  [Amazon SDK for Ruby V3](https://docs.amazonaws.cn/goto/SdkForRubyV3/config-2014-11-12/UntagResource)