https://github.com/udhos/aws-config-lambda
aws-config-lambda: Lambda function in Go for detecting configuration drift in AWS Config Rules.
https://github.com/udhos/aws-config-lambda
aws aws-config aws-lambda aws-lambda-golang go golang
Last synced: 5 months ago
JSON representation
aws-config-lambda: Lambda function in Go for detecting configuration drift in AWS Config Rules.
- Host: GitHub
- URL: https://github.com/udhos/aws-config-lambda
- Owner: udhos
- License: mit
- Created: 2019-05-28T17:14:03.000Z (over 6 years ago)
- Default Branch: master
- Last Pushed: 2019-06-14T17:29:17.000Z (over 6 years ago)
- Last Synced: 2025-05-31T17:36:11.754Z (7 months ago)
- Topics: aws, aws-config, aws-lambda, aws-lambda-golang, go, golang
- Language: Go
- Homepage:
- Size: 90.8 KB
- Stars: 0
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# aws-config-lambda
aws-config-lambda: Lambda function in Go for detecting configuration drift in AWS Config Rules.
## Scripts
Build and deploy lambda function:
./0-build.sh ;# build lambda function
./1-create.sh ;# create lambda function on aws
./2-update.sh ;# upload new lambda function to aws
Save resources' state:
./run-config-save-all.sh bucket ;# upload all resources' config to s3 bucket
Helper scripts:
./config-ec2-get.sh resource-id ;# download resource config
./ec2-list-by-tag.sh ;# list resources by tag
./s3-upload.sh resource-id bucket ;# upload single resource config to s3
## Rule parameters
Parameters for AWS Config Rules.
- Bucket: Required. Bucket storing desired configurations.
- Dump: Optional. If defined as 'ConfigItem', enables verbose logging.
- ResourceTypes: Optional. List of accepted resource types. If defined, restricts allowed resource types. Example value: 'AWS::EC2::Instance'. You can use 'AWS::SSM::ManagedInstanceInventory' to handle Systems Manager Inventory recorded as AWS Config configuration item.
- TopicArn: Optional. If defined, will publish non-compliance alerts. Example value: arn:aws:sns:sa-east-1:0123456789012:topic-name-for-non-compliance
- ForceNonCompliance: Optional. If defined, evaluations will report non-compliance.