Does AWS Config proactive compliance work with Terraform ?

Question

Does 
[AWS Config proactive compliance](https://aws.amazon.com/about-aws/whats-new/2022/11/aws-config-rules-support-proactive-compliance/) work with Terraform ?

Accepted Answer

No, at present it appears that Terraform does not support proactive Config Rules. The aws_config_config_rule resource documentation does not include an evaluation_modes block, which is required for enabling proactive rule evaluation (as mentioned in the PutConfigRule API documentation).

Also, it seems that this product was designed with CloudFormation in mind. In the StartResourceEvaluation API, the only valid value for the ResourceConfigurationSchemaType is CFN_RESOURCE_SCHEMA. Perhaps they'll add more types over time, but for now it looks like only CloudFormation is supported.

Also, it seems that this product was designed with CloudFormation in mind. In the [`StartResourceEvaluation` API](https://docs.aws.amazon.com/config/latest/APIReference/API_StartResourceEvaluation.html), the only valid value for the `ResourceConfigurationSchemaType` is `CFN_RESOURCE_SCHEMA`. Perhaps they'll add more types over time, but for now it looks like only CloudFormation is supported.

Answer

What are the use cases in which we much use AWS Config Proactive Compliance ? 
there is any way to start a resource evaluation inside a CI/CD pipeline or the only way is to call the config service API from CLI ?

Does AWS Config proactive compliance work with Terraform ?

相關內容