Config Recorder

Resource Type

AWS.Config.Recorder

Resource ID Format

For Config Recorder resources, the resource ID is constructed as such:

[AccountId]:[region]:AWS.CloudTrail.Meta

Example:

123456789012:us-west-2:AWS.Config.Recorder

This allows you to differentiate between Config Recorder resources across all AWS accounts you have linked by looking at the characters before the first colon, and to differentiate between Config Recorder resources within an account by looking at the characters between the first and second colon.

Background

This resource represents an AWS Config Recorder in a single region.

Fields

Field		Description
RecordingGroup	Map	Settings on the configuration recorder's group.
RoleARN	String	The IAM role used to describe the Amazon Web Services resources associated with the account.
Status	Map	Indicates whether this recorder is enabled, its name, and the most recent timestamps of certain events.

Example

{
    "AccountId": "123456789012",
    "Name": "default",
    "RecordingGroup": {
        "AllSupported": true,
        "IncludeGlobalResourceTypes": true,
        "ResourceTypes": null
    },
    "Region": "us-west-2",
    "ResourceId": "123456789012:us-west-2:AWS.Config.Recorder",
    "ResourceType": "AWS.Config.Recorder",
    "RoleARN": "arn:aws:iam::123456789012:role/aws-service-role/config.amazonaws.com/AWSServiceRoleForConfig",
    "Status": {
        "LastErrorCode": null,
        "LastErrorMessage": null,
        "LastStartTime": "2019-01-01T00:00:00Z",
        "LastStatus": "SUCCESS",
        "LastStatusChangeTime": "2019-01-01T00:00:00Z",
        "LastStopTime": null,
        "Name": "default",
        "Recording": true
    },
    "Tags": null,
    "TimeCreated": null
}