List of Amazon Config Managed Rules by Evaluation Mode
Amazon Config currently supports the following managed rules.
Note
The default values specified for managed rules are pre-populated only when using the Amazon console. Default values are not supplied for the API, CLI, or SDK.
Proactive Evaluation
Proactive rules are rules that support the proactive evaluation mode for resources that have not been deployed. This allows you to evaluate whether a set of resource properties, if used to define an Amazon resource, would be COMPLIANT or NON_COMPLIANT given the set of proactive rules that you have in your account in your Region. For more information, see Evaluation modes.
Note
Proactive rules do not remediate resources that are flagged as NON_COMPLIANT or prevent them from being deployed.
Detective Evaluation
Detective rules are rules that support the detective evaluation mode for resource that have already been deployed. This allows you to evaluate the configuration settings of your existing resources.
Note
Currently, all Amazon Config rules support detective evaluation.