Aws/config

@swamp/aws/configv2026.06.30.1· 7d agoMODELS

01README

AWS CONFIG infrastructure models

02Release Notes

Added: remediation_configuration

03Models7

@swamp/aws/config/aggregation-authorizationv2026.06.15.1aggregation_authorization.ts

Global Arguments

Argument	Type	Required	Description
name	string	yes	Instance name for this resource (used as the unique identifier in the factory pattern)
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AuthorizedAccountId	string	yes	The 12-digit account ID of the account authorized to aggregate data.
AuthorizedAwsRegion	string	yes	The region authorized to collect aggregated data.
Tags?	array	no	The tags for the AggregationAuthorization.

fn create()

Create a Config AggregationAuthorization

fn get(identifier: string)

Get a Config AggregationAuthorization

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config AggregationAuthorization

fn update()

Update a Config AggregationAuthorization

fn delete(identifier: string)

Delete a Config AggregationAuthorization

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config AggregationAuthorization

fn sync()

Sync Config AggregationAuthorization state from AWS

Resources

state(infinite)— Config AggregationAuthorization resource state

@swamp/aws/config/config-rulev2026.06.15.1config_rule.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
Description?	string	no	The description that you provide for the CC rule.
Scope?	object	no	Defines which resources can trigger an evaluation for the rule. The scope can include one or more resource types, a combination of one resource type and one resource ID, or a combination of a tag key and value. Specify a scope to constrain the resources that can trigger an evaluation for the rule. If you do not specify a scope, evaluations are triggered when any resource in the recording group changes. The scope can be empty.
ConfigRuleName?	string	no	A name for the CC rule. If you don't specify a name, CFN generates a unique physical ID and uses that ID for the rule name. For more information, see [Name Type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html).
MaximumExecutionFrequency?	string	no	The maximum frequency with which CC runs evaluations for a rule. You can specify a value for MaximumExecutionFrequency when: You are using an AWS managed rule that is triggered at a periodic frequency. Your custom rule is triggered when CC delivers the configuration snapshot. For more information, see [ConfigSnapshotDeliveryProperties](https://docs.aws.amazon.com/config/latest/APIReference/API_ConfigSnapshotDeliveryProperties.html). By default, rules with a periodic trigger are evaluated every 2
Source	object	yes	Provides the rule owner (`` for managed rules, CUSTOM_POLICY for Custom Policy rules, and CUSTOM_LAMBDA`` for Custom Lambda rules), the rule identifier, and the notifications that cause the function to evaluate your AWS resources.
InputParameters?	record	no	A string, in JSON format, that is passed to the CC rule Lambda function.
EvaluationModes?	array	no	The modes the CC rule can be evaluated in. The valid values are distinct objects. By default, the value is Detective evaluation mode only.

fn create()

Create a Config ConfigRule

fn get(identifier: string)

Get a Config ConfigRule

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConfigRule

fn update()

Update a Config ConfigRule

fn delete(identifier: string)

Delete a Config ConfigRule

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConfigRule

fn sync()

Sync Config ConfigRule state from AWS

Resources

state(infinite)— Config ConfigRule resource state

@swamp/aws/config/configuration-aggregatorv2026.06.15.1configuration_aggregator.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
AccountAggregationSources?	array	no
ConfigurationAggregatorName?	string	no	The name of the aggregator.
OrganizationAggregationSource?	object	no
Tags?	array	no	The tags for the configuration aggregator.

fn create()

Create a Config ConfigurationAggregator

fn get(identifier: string)

Get a Config ConfigurationAggregator

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConfigurationAggregator

fn update()

Update a Config ConfigurationAggregator

fn delete(identifier: string)

Delete a Config ConfigurationAggregator

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConfigurationAggregator

fn sync()

Sync Config ConfigurationAggregator state from AWS

Resources

state(infinite)— Config ConfigurationAggregator resource state

@swamp/aws/config/conformance-packv2026.06.15.1conformance_pack.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
ConformancePackName	string	yes	Name of the conformance pack which will be assigned as the unique identifier.
DeliveryS3Bucket?	string	no	AWS Config stores intermediate files while processing conformance pack template.
DeliveryS3KeyPrefix?	string	no	The prefix for delivery S3 bucket.
TemplateBody?	string	no	A string containing full conformance pack template body. You can only specify one of the template body or template S3Uri fields.
TemplateS3Uri?	string	no	Location of file containing the template body which points to the conformance pack template that is located in an Amazon S3 bucket. You can only specify one of the template body or template S3Uri fields.
TemplateSSMDocumentDetails?	object	no	The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document.
ConformancePackInputParameters?	array	no	A list of ConformancePackInputParameter objects.

fn create()

Create a Config ConformancePack

fn get(identifier: string)

Get a Config ConformancePack

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConformancePack

fn update()

Update a Config ConformancePack

fn delete(identifier: string)

Delete a Config ConformancePack

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config ConformancePack

fn sync()

Sync Config ConformancePack state from AWS

Resources

state(infinite)— Config ConformancePack resource state

@swamp/aws/config/organization-conformance-packv2026.06.15.1organization_conformance_pack.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
OrganizationConformancePackName	string	yes	The name of the organization conformance pack.
TemplateS3Uri?	string	no	Location of file containing the template body.
TemplateBody?	string	no	A string containing full conformance pack template body.
DeliveryS3Bucket?	string	no	AWS Config stores intermediate files while processing conformance pack template.
DeliveryS3KeyPrefix?	string	no	The prefix for the delivery S3 bucket.
ConformancePackInputParameters?	array	no	A list of ConformancePackInputParameter objects.
ExcludedAccounts?	array	no	A list of AWS accounts to be excluded from an organization conformance pack while deploying a conformance pack.

fn create()

Create a Config OrganizationConformancePack

fn get(identifier: string)

Get a Config OrganizationConformancePack

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config OrganizationConformancePack

fn update()

Update a Config OrganizationConformancePack

fn delete(identifier: string)

Delete a Config OrganizationConformancePack

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config OrganizationConformancePack

fn sync()

Sync Config OrganizationConformancePack state from AWS

Resources

state(infinite)— Config OrganizationConformancePack resource state

@swamp/aws/config/remediation-configurationv2026.06.30.1remediation_configuration.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
TargetVersion?	string	no
ExecutionControls?	object	no
Parameters?	record	no
TargetType	string	yes
ConfigRuleName	string	yes
ResourceType?	string	no
RetryAttemptSeconds?	number	no
MaximumAutomaticAttempts?	number	no
TargetId	string	yes
Automatic?	boolean	no

fn create()

Create a Config RemediationConfiguration

fn get(identifier: string)

Get a Config RemediationConfiguration

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config RemediationConfiguration

fn update()

Update a Config RemediationConfiguration

fn delete(identifier: string)

Delete a Config RemediationConfiguration

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config RemediationConfiguration

fn sync()

Sync Config RemediationConfiguration state from AWS

Resources

state(infinite)— Config RemediationConfiguration resource state

@swamp/aws/config/stored-queryv2026.06.15.1stored_query.ts

Global Arguments

Argument	Type	Required	Description
accessKeyId?	string	no	AWS access key ID; overrides AWS_ACCESS_KEY_ID environment variable. Wire with a vault.get(...) expression to source it from a vault.
secretAccessKey?	string	no	AWS secret access key; overrides AWS_SECRET_ACCESS_KEY environment variable. Wire with a vault.get(...) expression to source it from a vault.
sessionToken?	string	no	AWS session token for temporary credentials; overrides AWS_SESSION_TOKEN environment variable. Wire with a vault.get(...) expression to source it from a vault.
region?	string	no	AWS region; overrides AWS_REGION / AWS_DEFAULT_REGION environment variables and ~/.aws/config profile region. Defaults to us-east-1.
QueryName	string	yes
QueryDescription?	string	no
QueryExpression	string	yes
Tags?	array	no	The tags for the stored query.

fn create()

Create a Config StoredQuery

fn get(identifier: string)

Get a Config StoredQuery

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config StoredQuery

fn update()

Update a Config StoredQuery

fn delete(identifier: string)

Delete a Config StoredQuery

Argument	Type	Required	Description
identifier	string	yes	The primary identifier of the Config StoredQuery

fn sync()

Sync Config StoredQuery state from AWS

Resources

state(infinite)— Config StoredQuery resource state

04Previous Versions11

2026.06.15.1Jun 15, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.06.08.2Jun 8, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.06.06.1Jun 6, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.05.27.1May 27, 2026

Updated: config_rule

2026.05.19.1May 18, 2026

2026.04.23.3Apr 23, 2026

2026.04.23.2Apr 23, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.04.03.2Apr 3, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.03.19.1Mar 19, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.03.16.1Mar 16, 2026

Updated: aggregation_authorization, config_rule, configuration_aggregator, conformance_pack, organization_conformance_pack, stored_query

2026.03.10.5Mar 10, 2026

05Stats

85 / 100

Downloads

Archive size

1.6 MB

Verified by Swamp

Has README or module doc2/2earned
README has a code example1/1earned
README is substantive1/1earned
Most symbols documented1/1earned
No slow types (deprecated)1/1earned
Dependencies pass trust audit0/2missing
Has description1/1earned
Platform support declared (or universal)2/2earned
License declared1/1earned
Verified public repository2/2earned

Repository

https://github.com/swamp-club/swamp-extensions

06Platforms

linux · x86_64 linux · aarch64 macOS · x86_64 macOS · aarch64

07Labels

#aws #config #cloud #infrastructure