Aws/config Compliance
@webframp/aws/config-compliancev2026.06.29.1
01README
Observe AWS Config compliance evaluations as typed queryable data.
This model reads evaluation results from AWS Config rules — it does not manage Config rules or recorders. Use @swamp/aws/config for infrastructure.
AWS Config continuously evaluates resources against policy rules. Non-compliant resources represent drift from desired state. This model stores those verdicts as typed data queryable via CEL, feeding into @webframp/aws/drift-state as a fourth upstream source.
Quick Start
swamp extension pull @webframp/aws/config-compliance
swamp model create @webframp/aws/config-compliance aws-config-compliance
swamp model method run aws-config-compliance get_non_compliant
swamp model method run aws-config-compliance get_compliance_summaryMethods
- get_non_compliant — Fetch non-compliant evaluations across all Config rules
- get_compliance_summary — Rule-level compliance counts with metadata
- list_rules — Active Config rule inventory
Prerequisites
AWS Config must be enabled with active rules. Requires IAM permissions:
- config:DescribeComplianceByConfigRule
- config:GetComplianceDetailsByConfigRule
- config:DescribeConfigRules
- sts:GetCallerIdentity
02Models
@webframp/aws/config-compliancev2026.06.29.1aws/config_compliance.ts
Global Arguments
| Argument | Type | Description |
|---|---|---|
| region | string | AWS region to query |
fn get_non_compliant(includeCompliant?: boolean)
Fetch all non-compliant evaluations across Config rules. Primary output for drift-state consumption.
| Argument | Type | Description |
|---|---|---|
| includeCompliant? | boolean | Also include COMPLIANT evaluations (larger output) |
fn get_compliance_summary()
Get rule-level compliance summary with counts per rule
fn list_rules()
List active AWS Config rules with their source and scope
Resources
compliance(6h)— Full compliance evaluation results (non-compliant focus)
summary(1h)— Rule-level compliance summary
03Previous Versions
2026.06.27.1Jun 27, 2026
04Stats
A
100 / 100
Downloads
0
Archive size
281.3 KB
- Has README or module doc2/2earned
- README has a code example1/1earned
- README is substantive1/1earned
- Most symbols documented1/1earned
- No slow types (deprecated)1/1earned
- Dependencies pass trust audit2/2earned
- Has description1/1earned
- Platform support declared (or universal)2/2earned
- License declared1/1earned
- Verified public repository2/2earned
05Platforms
06Labels