AWS code-library documentation change
Summary
Added PowerShell V5 examples for checking compliance status of security-related rules (MFA, VPC flow logs)
Security assessment
Documents how to verify compliance with security best practices (root account MFA, VPC logging) but does not fix vulnerabilities.
Diff
diff --git a/code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md b/code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md index 8866f2776..53426599d 100644 --- a//code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md +++ b//code-library/latest/ug/config-service_example_config-service_DescribeConfigRuleEvaluationStatus_section.md @@ -88,0 +89,41 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This sample returns the status information for the given config rules.** + + + Get-CFGConfigRuleEvaluationStatus -ConfigRuleName root-account-mfa-enabled, vpc-flow-logs-enabled + + +**Output:** + + + ConfigRuleArn : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-kvq1wk + ConfigRuleId : config-rule-kvq1wk + ConfigRuleName : root-account-mfa-enabled + FirstActivatedTime : 8/27/2019 8:05:17 AM + FirstEvaluationStarted : True + LastErrorCode : + LastErrorMessage : + LastFailedEvaluationTime : 1/1/0001 12:00:00 AM + LastFailedInvocationTime : 1/1/0001 12:00:00 AM + LastSuccessfulEvaluationTime : 12/13/2019 8:12:03 AM + LastSuccessfulInvocationTime : 12/13/2019 8:12:03 AM + + ConfigRuleArn : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-z1s23b + ConfigRuleId : config-rule-z1s23b + ConfigRuleName : vpc-flow-logs-enabled + FirstActivatedTime : 8/14/2019 6:23:44 AM + FirstEvaluationStarted : True + LastErrorCode : + LastErrorMessage : + LastFailedEvaluationTime : 1/1/0001 12:00:00 AM + LastFailedInvocationTime : 1/1/0001 12:00:00 AM + LastSuccessfulEvaluationTime : 12/13/2019 7:12:01 AM + LastSuccessfulInvocationTime : 12/13/2019 7:12:01 AM + + * For API details, see [DescribeConfigRuleEvaluationStatus](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +