AWS::Config::ConformancePackA conformance pack is a collection of AWS Config rules and remediation actions that can be easily deployed in an account and a region. ConformancePack creates a service linked role in your account. The service linked role is created only when the role does not exist in your account.
import { CfnConformancePack } from 'aws-cdk-lib/aws-config';Or use the module namespace:
import * as config from 'aws-cdk-lib/aws-config';
// config.CfnConformancePackConfiguration passed to the constructor as CfnConformancePackProps.
conformancePackNameRequiredstringName of the conformance pack you want to create.
conformancePackInputParametersOptionalIResolvable | IResolvable | ConformancePackInputParameterProperty[]A list of ConformancePackInputParameter objects.
deliveryS3BucketOptionalstring | IBucketRefThe name of the Amazon S3 bucket where AWS Config stores conformance pack templates.
deliveryS3KeyPrefixOptionalstringThe prefix for the Amazon S3 bucket.
templateBodyOptionalstringA string containing full conformance pack template body. Structure containing the template body with a minimum length of 1 byte and a maximum length of 51,200 bytes. > You can only use a YAML template with two resource types: config rule ( `AWS::Config::ConfigRule` ) and a remediation action ( `AWS::Config::RemediationConfiguration` ).
templateS3UriOptionalstringLocation of file containing the template body (s3://bucketname/prefix). The uri must point to the conformance pack template (max size: 300 KB) that is located in an Amazon S3 bucket. > You must have access to read Amazon S3 bucket.
templateSsmDocumentDetailsOptionalanyAn object that contains the name or Amazon Resource Name (ARN) of the AWS Systems Manager document (SSM document) and the version of the SSM document that is used to create a conformance pack.
This L1 construct maps directly to the following CloudFormation resource type.
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletteraws-configAWS::Config::ConformancePack