AWS config documentation change
Summary
Added PowerShell V5 examples for compliance checks on access key rotation rules
Security assessment
Demonstrates compliance checking for security best practices (access key rotation) but does not fix vulnerabilities. Documents existing security feature usage.
Diff
diff --git a/config/latest/developerguide/example_config-service_GetComplianceDetailsByConfigRule_section.md b/config/latest/developerguide/example_config-service_GetComplianceDetailsByConfigRule_section.md index aa4e4f7a1..e72d5d627 100644 --- a//config/latest/developerguide/example_config-service_GetComplianceDetailsByConfigRule_section.md +++ b//config/latest/developerguide/example_config-service_GetComplianceDetailsByConfigRule_section.md @@ -109,0 +110,36 @@ PowerShell + + + + +**Tools for PowerShell V5** + + +**Example 1: This example obtains the evaluation results for the rule access-keys-rotated and returns the output grouped by compliance-type** + + + Get-CFGComplianceDetailsByConfigRule -ConfigRuleName access-keys-rotated | Group-Object ComplianceType + + +**Output:** + + + Count Name Group + ----- ---- ----- + 2 COMPLIANT {Amazon.ConfigService.Model.EvaluationResult, Amazon.ConfigService.Model.EvaluationResult} + 5 NON_COMPLIANT {Amazon.ConfigService.Model.EvaluationResult, Amazon.ConfigService.Model.EvaluationResult, Amazon.ConfigService.Model.EvaluationRes... + +**Example 2: This example queries compliance details for the rule access-keys-rotated for COMPLIANT resources.** + + + Get-CFGComplianceDetailsByConfigRule -ConfigRuleName access-keys-rotated -ComplianceType COMPLIANT | ForEach-Object {$_.EvaluationResultIdentifier.EvaluationResultQualifier} + + +**Output:** + + + ConfigRuleName ResourceId ResourceType + -------------- ---------- ------------ + access-keys-rotated BCAB1CDJ2LITAPVEW3JAH AWS::IAM::User + access-keys-rotated BCAB1CDJ2LITL3EHREM4Q AWS::IAM::User + + * For API details, see [GetComplianceDetailsByConfigRule](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_.