Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your desired configurations

Adds or updates an Config rule for your entire organization to evaluate if your Amazon Web Services resources comply with your desired configurations. For information on how many organization Config rules you can have per account, see Service Limits in the Config Developer Guide.

See https://www.paws-r-sdk.com/docs/configservice_put_organization_config_rule/ for full documentation.

Usage

configservice_put_organization_config_rule(
  OrganizationConfigRuleName,
  OrganizationManagedRuleMetadata = NULL,
  OrganizationCustomRuleMetadata = NULL,
  ExcludedAccounts = NULL,
  OrganizationCustomPolicyRuleMetadata = NULL
)

Arguments

OrganizationConfigRuleName

[required] The name that you assign to an organization Config rule.

OrganizationManagedRuleMetadata

An OrganizationManagedRuleMetadata object. This object specifies organization managed rule metadata such as resource type and ID of Amazon Web Services resource along with the rule identifier. It also provides the frequency with which you want Config to run evaluations for the rule if the trigger type is periodic.

OrganizationCustomRuleMetadata

An OrganizationCustomRuleMetadata object. This object specifies organization custom rule metadata such as resource type, resource ID of Amazon Web Services resource, Lambda function ARN, and organization trigger types that trigger Config to evaluate your Amazon Web Services resources against a rule. It also provides the frequency with which you want Config to run evaluations for the rule if the trigger type is periodic.

ExcludedAccounts

A comma-separated list of accounts that you want to exclude from an organization Config rule.

OrganizationCustomPolicyRuleMetadata

An OrganizationCustomPolicyRuleMetadata object. This object specifies metadata for your organization's Config Custom Policy rule. The metadata includes the runtime system in use, which accounts have debug logging enabled, and other custom rule metadata, such as resource type, resource ID of Amazon Web Services resource, and organization trigger types that initiate Config to evaluate Amazon Web Services resources against a rule.