Example Compliance Change Notification
When Amazon Config evaluates your resources against a custom or managed rule, Amazon Config sends a notification that shows whether the resources are compliant against the rule.
The following is an example notification where the CloudTrail trail resource is compliant
against the cloudtrail-enabled
managed rule.
{ "Type": "Notification", "MessageId": "11fd05dd-47e1-5523-bc01-55b988bb9478", "TopicArn": "arn:aws:sns:us-east-2:123456789012:config-topic-ohio", "Subject": "[AWS Config:us-east-2] AWS::::Account 123456789012 is COMPLIANT with cloudtrail-enabled in Accoun...", "Message": { "awsAccountId": "123456789012", "configRuleName": "cloudtrail-enabled", "configRuleARN": "arn:aws:config:us-east-2:123456789012:config-rule/config-rule-9rpvxc", "resourceType": "AWS::::Account", "resourceId": "123456789012", "awsRegion": "us-east-2", "newEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T19:48:40.619Z" }, "complianceType": "COMPLIANT", "resultRecordedTime": "2016-09-27T19:48:41.405Z", "configRuleInvokedTime": "2016-09-27T19:48:40.914Z", "annotation": null, "resultToken": null }, "oldEvaluationResult": { "evaluationResultIdentifier": { "evaluationResultQualifier": { "configRuleName": "cloudtrail-enabled", "resourceType": "AWS::::Account", "resourceId": "123456789012" }, "orderingTimestamp": "2016-09-27T16:30:49.531Z" }, "complianceType": "NON_COMPLIANT", "resultRecordedTime": "2016-09-27T16:30:50.717Z", "configRuleInvokedTime": "2016-09-27T16:30:50.105Z", "annotation": null, "resultToken": null }, "notificationCreationTime": "2016-09-27T19:48:42.620Z", "messageType": "ComplianceChangeNotification", "recordVersion": "1.0" }, "Timestamp": "2016-09-27T19:48:42.749Z", "SignatureVersion": "1", "Signature": "XZ9FfLb2ywkW9yj0yBkNtIP5q7Cry6JtCEyUiHmG9gpOZi3seQ41udhtAqCZoiNiizAEi+6gcttHCRV1hNemzp/YmBmTfO6azYXt0FJDaEvd86k68VCS9aqRlBBjYlNo7ILi4Pqd5rE4BX2YBQSzcQyERGkUfTZ2BIFyAmb1Q/y4/6ez8rDyi545FDSlgcGEb4LKLNR6eDi4FbKtMGZHA7Nz8obqs1dHbgWYnp3c80mVLl7ohP4hilcxdywAgXrbsN32ekYr15gdHozx8YzyjfRSo3SjH0c5PGSXEAGNuC3mZrKJip+BIZ21ZtkcUtY5B3ImgRlUO7Yhn3L3c6rZxQ==", "SigningCertURL": "https://sns.us-east-2.amazonaws.com/SimpleNotificationService-b95095beb82e8f6a046b3aafc7f4149a.pem", "UnsubscribeURL": "https://sns.us-east-2.amazonaws.com/?Action=Unsubscribe&SubscriptionArn=arn:aws:sns:us-east-2:123456789012:config-topic-ohio:956fe658-0ce3-4fb3-b409-a45f22a3c3d4" }
Example: Config Configuration Item Change | Amazon EventBridge
{ "version": "0", "id": "00bdf13e-1111-b2f5-cef0-e9cbbe7cd533", "detail-type": "Config Configuration Item Change", "source": "aws.config", "account": "123456789012", "time": "2022-03-16T01:10:51Z", "region": "us-east-1", "resources": ["arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/fs-01f0d526165b57f95"], "detail": { "recordVersion": "1.3", "messageType": "ConfigurationItemChangeNotification", "configurationItemDiff": { "changedProperties": { "Configuration.FileSystemTags.0": { "updatedValue": { "Key": "test", "Value": "me" }, "changeType": "CREATE" }, "Tags.2": { "updatedValue": "me", "changeType": "CREATE" } }, "changeType": "UPDATE" }, "notificationCreationTime": "2022-03-16T01:10:51.976Z", "configurationItem": { "relatedEvents": [], "relationships": [], "configuration": { "FileSystemId": "fs-01f0d526165b57f95", "Arn": "arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/fs-01f0d526165b57f95", "Encrypted": true, "FileSystemTags": [{ "Key": "Name", "Value": "myname" }, { "Key": "test", "Value": "me" }], "PerformanceMode": "generalPurpose", "ThroughputMode": "bursting", "LifecyclePolicies": [{ "TransitionToIA": "AFTER_30_DAYS" }, { "TransitionToPrimaryStorageClass": "AFTER_1_ACCESS" }], "BackupPolicy": { "Status": "ENABLED" }, "FileSystemPolicy": {}, "KmsKeyId": "arn:aws:kms:us-east-1:123456789012:key/0e6c91d5-e23b-4ed3-bd36-1561fbbc0a2d" }, "supplementaryConfiguration": {}, "tags": { "aws:elasticfilesystem:default-backup": "enabled", "test": "me", "Name": "cloudcontroltest1" }, "configurationItemVersion": "1.3", "configurationItemCaptureTime": "2022-03-16T01:10:50.837Z", "configurationStateId": 1647393050837, "awsAccountId": "123456789012", "configurationItemStatus": "OK", "resourceType": "AWS::EFS::FileSystem", "resourceId": "fs-01f0d526165b57f95", "resourceName": "fs-01f0d526165b57f95", "ARN": "arn:aws:elasticfilesystem:us-east-1:123456789012:file-system/fs-01f0d526165b57f95", "awsRegion": "us-east-1", "availabilityZone": "Regional", "configurationStateMd5Hash": "" } } }