AWS config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are related to one another, and how the configurations and their relationships have changed over time.
Questions tagged [aws-config]
124 questions
2
votes
1 answer
How to use aws credentials using cypress
I'm currently having difficulty finding a way to integrate my AWS credentials into my cypress tests when running cypress tests. The static approach works in hardcording your credentials into config.update . However I wish to opt for a more dynamic…
Qaleem Hussain
- 64
- 7
2
votes
1 answer
Object literal may only specify known properties, and 'allAwsRegions' does not exist in type 'IResolvable'
I am currently doing some work with the AWS-CDK and I am trying to create a Config Aggregator to aggregate the storage of all of my regions config logs. I am doing this with a region as the source instead of an account because I am not allowed/able…
aroe
- 499
- 1
- 6
- 15
2
votes
1 answer
getting OSError: Passed non-file path using pyarrow ParquetDataset
I have to run some tests on different environments. In tests I have to check some directories in s3 to find parquet files and transfer them to dictionary like this
import pyarrow.parquet as pq
import s3fs
env = 'dev'
aws_profile ={'dev':…
Alex Y
- 33
- 1
- 5
2
votes
1 answer
Is it possible to remediate AWS config rules from Centralized account?
If I do AWS config Multi account configuration and aggregate all the data to the centralized account.
Could I configure rules and create remediate actions from the centralized account ?
Does cross account remediation work for AWS config?
Dixon Joseph Dalmeida
- 302
- 3
- 23
2
votes
2 answers
How can I get a unique count of resources from AWS Config Advanced query
I've written the following query attempting to list all IAM users in my organization.
SELECT
arn,
COUNT(*)
WHERE
resourceType = 'AWS::IAM::User'
GROUP BY
arn
When I run this query in the Advanced query editor against my account, I get one…
thisguy123
- 939
- 1
- 9
- 31
2
votes
1 answer
What AWS services use AWS lambda behind the scenes?
We were in the process of setting up AWS Config Rules and came across a bug in one of the AWS managed rules. During our conversation with the AWS support person, he has revealed that the AWS Config Rules are processed by AWS Lambda functions behind…
devopseng
- 39
- 1
- 3
2
votes
1 answer
Error: FATAL NoCredentialProviders: no valid providers in chain caused by: EnvAccessKeyNotFound:
I was using aws-runas to run the following aws-cli command:
aws-runas xxx-prod aws s3 ls
I got the following error:
FATAL NoCredentialProviders: no valid providers in chain caused by: EnvAccessKeyNotFound:
failed to find credentials in the…
harshainfo
- 504
- 7
- 11
2
votes
1 answer
AWS Config insufficient delivery policy error
I am currently trying to enable AWS Config notifications on multiple accounts. I have enabled monitoring on each individual account with its own S3 bucket and SNS topic, but it would make more sense to have one centralized bucket and topic. I am…
Richard Hewitt
- 345
- 1
- 5
- 22
1
vote
0 answers
Enforce AWS::ElasticLoadBalancingV2::Listener + TLS >= 1.2
What is the best way to force all "AWS::ElasticLoadBalancingV2::Listener" (in particular the application load balancer) to use at least TLS 1.2 at the organization level with a large number of subaccounts?
I've tried to create an SCP, but the…
GTXBxaKgCANmT9D9
- 276
- 4
- 12
1
vote
1 answer
The boto3 `list_discovered_resources` method is returning deleted resources even when flag `includeDeletedResources` is set to False
I am using a python script to fetch active resources from my AWS account. I am using the following method:
member_session = boto3.session.Session(
aws_access_key_id=credentials["Credentials"]["AccessKeyId"],
…
sparkstar
- 593
- 1
- 7
- 14
1
vote
1 answer
Unable to load AWS credentials from ~/.aws/config and ~/.aws/credentials file
After typing aws configure list command in my project path, I get:
Name Value Type Location
---- ----- ---- --------
profile None…
tbone
- 1,148
- 5
- 19
- 35
1
vote
1 answer
aws-controltower-GuardrailsComplianceAggregator does not have access to config data from enrolled accounts
AWS Control Tower installs aws-controltower-GuardrailsComplianceAggregator as an AWS Config Aggregator in the Audit account, referencing all accounts (except Master) as source accounts. However, the config aggregator does not have access to the data…
Eirik Lygre
- 290
- 2
- 5
- 16
1
vote
1 answer
Is there a way to write to the aws config file in node?
I want to load the AWS config file and edit the contents of the file.
I found @aws-sdk/shared-ini-file-loader, that works well to load the config file data as the JSON object.
import { loadSharedConfigFiles } from…
Shishir Anshuman
- 1,115
- 7
- 23
1
vote
1 answer
How to exclude an individual resource from AWS Config
How can we exclude a specific resource from AWS Config Recorder. I don't want to have to include every resource type this will be a pain.
Derrops
- 7,651
- 5
- 30
- 60
1
vote
1 answer
Terraform - Get a value from AWS app config params and pass to resource
How to get aws configuration parameters stored in json format on S3 in terraform scripts. I want to use those parameters in another resources.
I just want to externalise all the variable parameters in the script.
e.g: we have Data Source:…
PrasadB
- 91
- 1
- 7