Package com.pulumi.aws.cfg
Class RemediationConfiguration
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.cfg.RemediationConfiguration
-
public class RemediationConfiguration extends com.pulumi.resources.CustomResourceProvides an AWS Config Remediation Configuration. > **Note:** Config Remediation Configuration requires an existing Config Rule to be present. ## Example Usage AWS managed rules can be used by setting the source owner to `AWS` and the source identifier to the name of the managed rule. More information about AWS managed rules can be found in the [AWS Config Developer Guide](https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html).
## Import ### Identity Schema #### Required * `configRuleName` (String) Name of the AWS Config rule. #### Optional * `accountId` (String) AWS Account where this resource is managed. * `region` (String) Region where this resource is managed. Using `pulumi import`, import Remediation Configurations using the `configRuleName`. For example: ```sh $ pulumi import aws:cfg/remediationConfiguration:RemediationConfiguration example example ```package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.cfg.Rule; import com.pulumi.aws.cfg.RuleArgs; import com.pulumi.aws.cfg.inputs.RuleSourceArgs; import com.pulumi.aws.cfg.RemediationConfiguration; import com.pulumi.aws.cfg.RemediationConfigurationArgs; import com.pulumi.aws.cfg.inputs.RemediationConfigurationExecutionControlsArgs; import com.pulumi.aws.cfg.inputs.RemediationConfigurationExecutionControlsSsmControlsArgs; import com.pulumi.aws.cfg.inputs.RemediationConfigurationParameterArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var this_ = new Rule("this", RuleArgs.builder() .source(RuleSourceArgs.builder() .owner("AWS") .sourceIdentifier("S3_BUCKET_VERSIONING_ENABLED") .build()) .name("example") .build()); var thisRemediationConfiguration = new RemediationConfiguration("thisRemediationConfiguration", RemediationConfigurationArgs.builder() .executionControls(RemediationConfigurationExecutionControlsArgs.builder() .ssmControls(RemediationConfigurationExecutionControlsSsmControlsArgs.builder() .concurrentExecutionRatePercentage(25) .errorPercentage(20) .build()) .build()) .parameters( RemediationConfigurationParameterArgs.builder() .name("AutomationAssumeRole") .staticValue("arn:aws:iam::875924563244:role/security_config") .build(), RemediationConfigurationParameterArgs.builder() .name("BucketName") .resourceValue("RESOURCE_ID") .build(), RemediationConfigurationParameterArgs.builder() .name("SSEAlgorithm") .staticValue("AES256") .build()) .configRuleName(this_.name()) .resourceType("AWS::S3::Bucket") .targetType("SSM_DOCUMENT") .targetId("AWS-EnableS3BucketEncryption") .targetVersion("1") .automatic(true) .maximumAutomaticAttempts(10) .retryAttemptSeconds(600) .build()); } }
-
-
Constructor Summary
Constructors Constructor Description RemediationConfiguration(java.lang.String name)RemediationConfiguration(java.lang.String name, RemediationConfigurationArgs args)RemediationConfiguration(java.lang.String name, RemediationConfigurationArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.String>arn()com.pulumi.core.Output<java.util.Optional<java.lang.Boolean>>automatic()com.pulumi.core.Output<java.lang.String>configRuleName()com.pulumi.core.Output<java.util.Optional<RemediationConfigurationExecutionControls>>executionControls()static RemediationConfigurationget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, RemediationConfigurationState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.util.Optional<java.lang.Integer>>maximumAutomaticAttempts()com.pulumi.core.Output<java.util.Optional<java.util.List<RemediationConfigurationParameter>>>parameters()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.util.Optional<java.lang.String>>resourceType()com.pulumi.core.Output<java.util.Optional<java.lang.Integer>>retryAttemptSeconds()com.pulumi.core.Output<java.lang.String>targetId()com.pulumi.core.Output<java.lang.String>targetType()com.pulumi.core.Output<java.util.Optional<java.lang.String>>targetVersion()
-
-
-
Constructor Detail
-
RemediationConfiguration
public RemediationConfiguration(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
RemediationConfiguration
public RemediationConfiguration(java.lang.String name, RemediationConfigurationArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
RemediationConfiguration
public RemediationConfiguration(java.lang.String name, RemediationConfigurationArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
arn
public com.pulumi.core.Output<java.lang.String> arn()
- Returns:
- ARN of the Config Remediation Configuration.
-
automatic
public com.pulumi.core.Output<java.util.Optional<java.lang.Boolean>> automatic()
- Returns:
- Remediation is triggered automatically if `true`.
-
configRuleName
public com.pulumi.core.Output<java.lang.String> configRuleName()
- Returns:
- Name of the AWS Config rule.
-
executionControls
public com.pulumi.core.Output<java.util.Optional<RemediationConfigurationExecutionControls>> executionControls()
- Returns:
- Configuration block for execution controls. See below.
-
maximumAutomaticAttempts
public com.pulumi.core.Output<java.util.Optional<java.lang.Integer>> maximumAutomaticAttempts()
- Returns:
- Maximum number of failed attempts for auto-remediation. If you do not select a number, the default is 5.
-
parameters
public com.pulumi.core.Output<java.util.Optional<java.util.List<RemediationConfigurationParameter>>> parameters()
- Returns:
- Can be specified multiple times for each parameter. Each parameter block supports arguments below.
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
resourceType
public com.pulumi.core.Output<java.util.Optional<java.lang.String>> resourceType()
- Returns:
- Type of resource.
-
retryAttemptSeconds
public com.pulumi.core.Output<java.util.Optional<java.lang.Integer>> retryAttemptSeconds()
- Returns:
- Maximum time in seconds that AWS Config runs auto-remediation. If you do not select a number, the default is 60 seconds.
-
targetId
public com.pulumi.core.Output<java.lang.String> targetId()
- Returns:
- Target ID is the name of the public document.
-
targetType
public com.pulumi.core.Output<java.lang.String> targetType()
- Returns:
- Type of the target. Target executes remediation. For example, SSM document. The following arguments are optional:
-
targetVersion
public com.pulumi.core.Output<java.util.Optional<java.lang.String>> targetVersion()
- Returns:
- Version of the target. For example, version of the SSM document
-
get
public static RemediationConfiguration get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable RemediationConfigurationState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-