software.amazon.awscdk.services.config

Interface CloudFormationStackDriftDetectionCheckProps

All Superinterfaces:

software.amazon.jsii.JsiiSerializable, RuleProps

All Known Implementing Classes:

CloudFormationStackDriftDetectionCheckProps.Jsii$Proxy

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-19T20:26:37.738Z")
 @Stability(value=Stable)
public interface CloudFormationStackDriftDetectionCheckProps
extends software.amazon.jsii.JsiiSerializable, RuleProps

Construction properties for a CloudFormationStackDriftDetectionCheck.

Example:

 // compliant if stack's status is 'IN_SYNC'
 // non-compliant if the stack's drift status is 'DRIFTED'
 // compliant if stack's status is 'IN_SYNC'
 // non-compliant if the stack's drift status is 'DRIFTED'
 CloudFormationStackDriftDetectionCheck.Builder.create(this, "Drift")
         .ownStackOnly(true)
         .build();
 

Nested Class Summary

Nested Classes

Modifier and Type	Interface and Description
static class	CloudFormationStackDriftDetectionCheckProps.Builder A builder for CloudFormationStackDriftDetectionCheckProps
static class	CloudFormationStackDriftDetectionCheckProps.Jsii$Proxy An implementation for CloudFormationStackDriftDetectionCheckProps

Method Summary

Modifier and Type	Method and Description
static CloudFormationStackDriftDetectionCheckProps.Builder	builder()
default Boolean	getOwnStackOnly() Whether to check only the stack where this rule is deployed.
default IRole	getRole() The IAM role to use for this rule.

Methods inherited from interface software.amazon.awscdk.services.config.RuleProps

getConfigRuleName, getDescription, getInputParameters, getMaximumExecutionFrequency, getRuleScope

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getOwnStackOnly

@Stability(value=Stable)
 @Nullable
default Boolean getOwnStackOnly()

Whether to check only the stack where this rule is deployed.

Default: false

getRole

@Stability(value=Stable)
 @Nullable
default IRole getRole()

The IAM role to use for this rule.

It must have permissions to detect drift for AWS CloudFormation stacks. Ensure to attach config.amazonaws.com trusted permissions and ReadOnlyAccess policy permissions. For specific policy permissions, refer to https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html.

Default: - A role will be created

builder

@Stability(value=Stable)
static CloudFormationStackDriftDetectionCheckProps.Builder builder()

Specified by:

builder in interface RuleProps

Returns:

a CloudFormationStackDriftDetectionCheckProps.Builder of CloudFormationStackDriftDetectionCheckProps