AWS config documentation change
Summary
Added PowerShell V5 examples for DescribeConfigRuleEvaluationStatus including security-related config rules like root-account-mfa-enabled
Security assessment
The change adds documentation examples for checking security-related AWS Config rules, but does not address any specific vulnerability or security incident. It enhances documentation of existing security features.
Diff
diff --git a/config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md b/config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md index 2dd84432b..55fd9a3cf 100644 --- a//config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md +++ b//config/latest/developerguide/example_config-service_DescribeConfigRuleEvaluationStatus_section.md @@ -86,0 +87,41 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This sample returns the status information for the given config rules.** + + + Get-CFGConfigRuleEvaluationStatus -ConfigRuleName root-account-mfa-enabled, vpc-flow-logs-enabled + + +**Output:** + + + ConfigRuleArn : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-kvq1wk + ConfigRuleId : config-rule-kvq1wk + ConfigRuleName : root-account-mfa-enabled + FirstActivatedTime : 8/27/2019 8:05:17 AM + FirstEvaluationStarted : True + LastErrorCode : + LastErrorMessage : + LastFailedEvaluationTime : 1/1/0001 12:00:00 AM + LastFailedInvocationTime : 1/1/0001 12:00:00 AM + LastSuccessfulEvaluationTime : 12/13/2019 8:12:03 AM + LastSuccessfulInvocationTime : 12/13/2019 8:12:03 AM + + ConfigRuleArn : arn:aws:config:eu-west-1:123456789012:config-rule/config-rule-z1s23b + ConfigRuleId : config-rule-z1s23b + ConfigRuleName : vpc-flow-logs-enabled + FirstActivatedTime : 8/14/2019 6:23:44 AM + FirstEvaluationStarted : True + LastErrorCode : + LastErrorMessage : + LastFailedEvaluationTime : 1/1/0001 12:00:00 AM + LastFailedInvocationTime : 1/1/0001 12:00:00 AM + LastSuccessfulEvaluationTime : 12/13/2019 7:12:01 AM + LastSuccessfulInvocationTime : 12/13/2019 7:12:01 AM + + * For API details, see [DescribeConfigRuleEvaluationStatus](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +