AWS Security ChangesHomeSearch

AWS config documentation change

Service: config · 2025-06-28 · Documentation low

File: config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md

Summary

Added PowerShell V5 examples for DescribeConfigRuleEvaluationStatus including security-related config rules like root-account-mfa-enabled

Security assessment

The change adds documentation examples for checking security-related AWS Config rules, but does not address any specific vulnerability or security incident. It enhances documentation of existing security features.

Diff

diff --git a/config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md b/config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md
index 2dd84432b..55fd9a3cf 100644
--- a//config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md
+++ b//config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md
@@ -86,0 +87,41 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: This sample returns the status information for the given config rules.**
+    
+    
+    Get-CFGConfigRuleEvaluationStatus -ConfigRuleName root-account-mfa-enabled, vpc-flow-logs-enabled
+    
+
+**Output:**
+    
+    
+    ConfigRuleArn                : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-kvq1wk
+    ConfigRuleId                 : config-rule-kvq1wk
+    ConfigRuleName               : root-account-mfa-enabled
+    FirstActivatedTime           : 8/27/2019 8:05:17 AM
+    FirstEvaluationStarted       : True
+    LastErrorCode                :
+    LastErrorMessage             :
+    LastFailedEvaluationTime     : 1/1/0001 12:00:00 AM
+    LastFailedInvocationTime     : 1/1/0001 12:00:00 AM
+    LastSuccessfulEvaluationTime : 12/13/2019 8:12:03 AM
+    LastSuccessfulInvocationTime : 12/13/2019 8:12:03 AM
+    
+    ConfigRuleArn                : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-z1s23b
+    ConfigRuleId                 : config-rule-z1s23b
+    ConfigRuleName               : vpc-flow-logs-enabled
+    FirstActivatedTime           : 8/14/2019 6:23:44 AM
+    FirstEvaluationStarted       : True
+    LastErrorCode                :
+    LastErrorMessage             :
+    LastFailedEvaluationTime     : 1/1/0001 12:00:00 AM
+    LastFailedInvocationTime     : 1/1/0001 12:00:00 AM
+    LastSuccessfulEvaluationTime : 12/13/2019 7:12:01 AM
+    LastSuccessfulInvocationTime : 12/13/2019 7:12:01 AM
+
+  * For API details, see [DescribeConfigRuleEvaluationStatus](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+