aggregation_authorizations

Creates, updates, deletes or gets an aggregation_authorization resource or lists aggregation_authorizations in a region

Overview

Name	aggregation_authorizations
Type	Resource
Description	Resource Type definition for AWS::Config::AggregationAuthorization
Id	aws.config.aggregation_authorizations

Fields

Name	Datatype	Description
authorized_account_id	string	The 12-digit account ID of the account authorized to aggregate data.
authorized_aws_region	string	The region authorized to collect aggregated data.
aggregation_authorization_arn	string	The ARN of the AggregationAuthorization.
tags	array	The tags for the AggregationAuthorization.
region	string	AWS region.

Methods

Name	Accessible by	Required Params
create_resource	INSERT	AuthorizedAccountId, AuthorizedAwsRegion, region
delete_resource	DELETE	data__Identifier, region
update_resource	UPDATE	data__Identifier, data__PatchDocument, region
list_resources	SELECT	region
get_resource	SELECT	data__Identifier, region

SELECT examples

Gets all aggregation_authorizations in a region.

SELECT
region,
authorized_account_id,
authorized_aws_region,
aggregation_authorization_arn,
tags
FROM aws.config.aggregation_authorizations
WHERE region = 'us-east-1';

Gets all properties from an individual aggregation_authorization.

SELECT
region,
authorized_account_id,
authorized_aws_region,
aggregation_authorization_arn,
tags
FROM aws.config.aggregation_authorizations
WHERE region = 'us-east-1' AND data__Identifier = '<AuthorizedAccountId>|<AuthorizedAwsRegion>';

INSERT example

Use the following StackQL query and manifest file to create a new aggregation_authorization resource, using stack-deploy.

Required Properties

/*+ create */
INSERT INTO aws.config.aggregation_authorizations (
 AuthorizedAccountId,
 AuthorizedAwsRegion,
 region
)
SELECT 
'{{ AuthorizedAccountId }}',
 '{{ AuthorizedAwsRegion }}',
'{{ region }}';

All Properties

/*+ create */
INSERT INTO aws.config.aggregation_authorizations (
 AuthorizedAccountId,
 AuthorizedAwsRegion,
 Tags,
 region
)
SELECT 
 '{{ AuthorizedAccountId }}',
 '{{ AuthorizedAwsRegion }}',
 '{{ Tags }}',
 '{{ region }}';

Manifest

version: 1
name: stack name
description: stack description
providers:
  - aws
globals:
  - name: region
    value: '{{ vars.AWS_REGION }}'
resources:
  - name: aggregation_authorization
    props:
      - name: AuthorizedAccountId
        value: '{{ AuthorizedAccountId }}'
      - name: AuthorizedAwsRegion
        value: '{{ AuthorizedAwsRegion }}'
      - name: Tags
        value:
          - Key: '{{ Key }}'
            Value: '{{ Value }}'

DELETE example

/*+ delete */
DELETE FROM aws.config.aggregation_authorizations
WHERE data__Identifier = '<AuthorizedAccountId|AuthorizedAwsRegion>'
AND region = 'us-east-1';

Permissions

To operate on the aggregation_authorizations resource, the following permissions are required:

Create

config:DescribeAggregationAuthorizations,
config:PutAggregationAuthorization,
config:TagResource

Update

config:DescribeAggregationAuthorizations,
config:TagResource,
config:UntagResource,
config:ListTagsForResource

Read

config:DescribeAggregationAuthorizations,
config:ListTagsForResource

Delete

config:DescribeAggregationAuthorizations,
config:DeleteAggregationAuthorization,
config:UntagResource

List

config:DescribeAggregationAuthorizations