AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2025-06-28 · Documentation medium

File: code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md

Summary

Added PowerShell V5 examples for checking compliance status of security-related rules (MFA, VPC flow logs)

Security assessment

Documents how to verify compliance with security best practices (root account MFA, VPC logging) but does not fix vulnerabilities.

Diff

diff --git a/code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md b/code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md
index 8866f2776..53426599d 100644
--- a//code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md
+++ b//code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md
@@ -88,0 +89,41 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: This sample returns the status information for the given config rules.**
+    
+    
+    Get-CFGConfigRuleEvaluationStatus -ConfigRuleName root-account-mfa-enabled, vpc-flow-logs-enabled
+    
+
+**Output:**
+    
+    
+    ConfigRuleArn                : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-kvq1wk
+    ConfigRuleId                 : config-rule-kvq1wk
+    ConfigRuleName               : root-account-mfa-enabled
+    FirstActivatedTime           : 8/27/2019 8:05:17 AM
+    FirstEvaluationStarted       : True
+    LastErrorCode                :
+    LastErrorMessage             :
+    LastFailedEvaluationTime     : 1/1/0001 12:00:00 AM
+    LastFailedInvocationTime     : 1/1/0001 12:00:00 AM
+    LastSuccessfulEvaluationTime : 12/13/2019 8:12:03 AM
+    LastSuccessfulInvocationTime : 12/13/2019 8:12:03 AM
+    
+    ConfigRuleArn                : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-z1s23b
+    ConfigRuleId                 : config-rule-z1s23b
+    ConfigRuleName               : vpc-flow-logs-enabled
+    FirstActivatedTime           : 8/14/2019 6:23:44 AM
+    FirstEvaluationStarted       : True
+    LastErrorCode                :
+    LastErrorMessage             :
+    LastFailedEvaluationTime     : 1/1/0001 12:00:00 AM
+    LastFailedInvocationTime     : 1/1/0001 12:00:00 AM
+    LastSuccessfulEvaluationTime : 12/13/2019 7:12:01 AM
+    LastSuccessfulInvocationTime : 12/13/2019 7:12:01 AM
+
+  * For API details, see [DescribeConfigRuleEvaluationStatus](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+