List of Amazon Config Managed Rules by Evaluation Mode - Amazon Config
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

List of Amazon Config Managed Rules by Evaluation Mode

Amazon Config currently supports the following managed rules. Before using these rules, see Considerations.

Proactive Evaluation

Proactive rules are rules that support the proactive evaluation mode for resources that have not been deployed. This allows you to evaluate whether a set of resource properties, if used to define an Amazon resource, would be COMPLIANT or NON_COMPLIANT given the set of proactive rules that you have in your account in your Region. For more information, see Evaluation modes.

Note

Proactive rules do not remediate resources that are flagged as NON_COMPLIANT or prevent them from being deployed.

Detective Evaluation

Detective rules are rules that support the detective evaluation mode for resource that have already been deployed. This allows you to evaluate the configuration settings of your existing resources.

Note

Currently, all Amazon Config rules support detective evaluation.