Looking Up Resources That Are Discovered by Amazon Config - Amazon Config
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Looking Up Resources That Are Discovered by Amazon Config

You can use the Amazon Config console, Amazon CLI, and Amazon Config API to look up the resources that Amazon Config has taken an inventory of, or discovered, including deleted resources and resources that Amazon Config is not currently recording. Amazon Config discovers supported resource types only. For more information, see Supported Resource Types.

Looking Up Resources (Console)

You can use resource types or tag information to look up resources in the Amazon Config console.

  1. Sign in to the Amazon Web Services Management Console and open the Amazon Config console at https://console.amazonaws.cn/config/.

  2. On the Resource inventory page, specify the search options for the resources that you want to look up:

    • Resource category – Choose all resource categories or narrow results to only Amazon Resources.

    • Resource type – Choose all resource types or select which resource(s) to filter by.

    • Compliance – Choose to filter by any compliance status, compliant, or noncompliant.

  3. Amazon Config lists the resources that match your search options. You can see the following information about the resources:

    • Resource identifier – The resource identifier might be a resource ID or a resource name, if applicable. Choose the resource identifier link to view the resource details page.

    • Resource type – The type of the resource is listed.

    • Compliance – The status of the resource that Amazon Config evaluated against your rule.

Looking Up Resources (Amazon CLI)

You can use the Amazon CLI to list resources that Amazon Config has discovered.

Use the Amazon Configservice list-discovered-resources command:

$ aws configservice list-discovered-resources --resource-type "AWS::EC2::Instance"
        {
            "resourceIdentifiers": [
                {
                    "resourceType": "AWS::EC2::Instance",
                    "resourceId": "i-nnnnnnnn"
                }
            ]
        }

To view the configuration details of a resource that is listed in the response, use the get-resource-config-history command, and specify the resource type and ID. For an example of this command and the response from Amazon Config, see Viewing Configuration History.

Looking up Resources (API)

You specify a resource type, and Amazon Config returns a list of resource identifiers for resources of that type. For more information, see ResourceIdentifier in the Amazon Config API Reference.

Use the ListDiscoveredResources action.

To get the configuration details of a resource that is listed in the response, use the GetResourceConfigHistory action, and specify the resource type and ID.