Sign in Dashboard Get started
  1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. configuration
  6. getConfigurationRecorder

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.81.0
published on Monday, Sep 28, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.configuration.getConfigurationRecorder

aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.81.0
published on Monday, Sep 28, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource type definition for AWS::Config::ConfigurationRecorder

    Using getConfigurationRecorder

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getConfigurationRecorder(args: GetConfigurationRecorderArgs, opts?: InvokeOptions): Promise<GetConfigurationRecorderResult>
function getConfigurationRecorderOutput(args: GetConfigurationRecorderOutputArgs, opts?: InvokeOutputOptions): Output<GetConfigurationRecorderResult>
    def get_configuration_recorder(name: Optional[str] = None,
                               opts: Optional[InvokeOptions] = None) -> GetConfigurationRecorderResult
def get_configuration_recorder_output(name: pulumi.Input[Optional[str]] = None,
                               opts: Optional[InvokeOutputOptions] = None) -> Output[GetConfigurationRecorderResult]
    func LookupConfigurationRecorder(ctx *Context, args *LookupConfigurationRecorderArgs, opts ...InvokeOption) (*LookupConfigurationRecorderResult, error)
func LookupConfigurationRecorderOutput(ctx *Context, args *LookupConfigurationRecorderOutputArgs, opts ...InvokeOption) LookupConfigurationRecorderResultOutput

    > Note: This function is named LookupConfigurationRecorder in the Go SDK.

    public static class GetConfigurationRecorder 
{
    public static Task<GetConfigurationRecorderResult> InvokeAsync(GetConfigurationRecorderArgs args, InvokeOptions? opts = null)
    public static Output<GetConfigurationRecorderResult> Invoke(GetConfigurationRecorderInvokeArgs args, InvokeOptions? opts = null)
    public static Output<GetConfigurationRecorderResult> Invoke(GetConfigurationRecorderInvokeArgs args, InvokeOutputOptions opts)
}
    public static CompletableFuture<GetConfigurationRecorderResult> getConfigurationRecorder(GetConfigurationRecorderArgs args, InvokeOptions options)
public static Output<GetConfigurationRecorderResult> getConfigurationRecorder(GetConfigurationRecorderArgs args, InvokeOptions options)
public static Output<GetConfigurationRecorderResult> getConfigurationRecorder(GetConfigurationRecorderArgs args, InvokeOutputOptions options)

    fn::invoke:
  function: aws-native:configuration:getConfigurationRecorder
  arguments:
    # arguments dictionary
    data "aws-native_configuration_get_configuration_recorder" "name" {
    # arguments
}

    The following arguments are supported:

    Name string
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    Name string
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    name string
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    name String
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    name string
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    name str
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.
    name String
    The name of the configuration recorder. By default, AWS Config assigns the name "default" when creating the configuration recorder. To change the configuration recorder name, you must use the DeleteConfigurationRecorder action to delete your current configuration recorder, and then you must use the PutConfigurationRecorder command to create a configuration recorder that has the desired name.

    getConfigurationRecorder Result

    The following output properties are available:

    RecordingGroup Pulumi.AwsNative.Configuration.Outputs.ConfigurationRecorderRecordingGroup
    Specifies which resource types are in scope for the configuration recorder to record.
    RecordingMode Pulumi.AwsNative.Configuration.Outputs.ConfigurationRecorderRecordingMode
    Specifies the default recording frequency for the configuration recorder.
    ResourceArn string
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    RoleArn string
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    RecordingGroup ConfigurationRecorderRecordingGroup
    Specifies which resource types are in scope for the configuration recorder to record.
    RecordingMode ConfigurationRecorderRecordingMode
    Specifies the default recording frequency for the configuration recorder.
    ResourceArn string
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    RoleArn string
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    recording_group object
    Specifies which resource types are in scope for the configuration recorder to record.
    recording_mode object
    Specifies the default recording frequency for the configuration recorder.
    resource_arn string
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    role_arn string
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    recordingGroup ConfigurationRecorderRecordingGroup
    Specifies which resource types are in scope for the configuration recorder to record.
    recordingMode ConfigurationRecorderRecordingMode
    Specifies the default recording frequency for the configuration recorder.
    resourceArn String
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    roleArn String
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    recordingGroup ConfigurationRecorderRecordingGroup
    Specifies which resource types are in scope for the configuration recorder to record.
    recordingMode ConfigurationRecorderRecordingMode
    Specifies the default recording frequency for the configuration recorder.
    resourceArn string
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    roleArn string
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    recording_group ConfigurationRecorderRecordingGroup
    Specifies which resource types are in scope for the configuration recorder to record.
    recording_mode ConfigurationRecorderRecordingMode
    Specifies the default recording frequency for the configuration recorder.
    resource_arn str
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    role_arn str
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.
    recordingGroup Property Map
    Specifies which resource types are in scope for the configuration recorder to record.
    recordingMode Property Map
    Specifies the default recording frequency for the configuration recorder.
    resourceArn String
    Returns the Amazon Resource Name (ARN) for the Configuration Recorder.
    roleArn String
    The Amazon Resource Name (ARN) of the role that allows AWS Config to read S3 objects.

    Supporting Types

    ConfigurationRecorderExclusionByResourceTypes

    ResourceTypes List<string>
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    ResourceTypes []string
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    resource_types list(string)
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    resourceTypes List<String>
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    resourceTypes string[]
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    resource_types Sequence[str]
    A comma-separated list of resource types to exclude from recording by the configuration recorder.
    resourceTypes List<String>
    A comma-separated list of resource types to exclude from recording by the configuration recorder.

    ConfigurationRecorderRecordingGroup

    AllSupported bool
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    ExclusionByResourceTypes Pulumi.AwsNative.Configuration.Inputs.ConfigurationRecorderExclusionByResourceTypes
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    IncludeGlobalResourceTypes bool
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    RecordingStrategy Pulumi.AwsNative.Configuration.Inputs.ConfigurationRecorderRecordingStrategy
    An object that specifies the recording strategy for the configuration recorder.
    ResourceTypes List<string>
    A comma-separated list that specifies which resource types AWS Config records.
    AllSupported bool
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    ExclusionByResourceTypes ConfigurationRecorderExclusionByResourceTypes
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    IncludeGlobalResourceTypes bool
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    RecordingStrategy ConfigurationRecorderRecordingStrategy
    An object that specifies the recording strategy for the configuration recorder.
    ResourceTypes []string
    A comma-separated list that specifies which resource types AWS Config records.
    all_supported bool
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    exclusion_by_resource_types object
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    include_global_resource_types bool
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    recording_strategy object
    An object that specifies the recording strategy for the configuration recorder.
    resource_types list(string)
    A comma-separated list that specifies which resource types AWS Config records.
    allSupported Boolean
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    exclusionByResourceTypes ConfigurationRecorderExclusionByResourceTypes
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    includeGlobalResourceTypes Boolean
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    recordingStrategy ConfigurationRecorderRecordingStrategy
    An object that specifies the recording strategy for the configuration recorder.
    resourceTypes List<String>
    A comma-separated list that specifies which resource types AWS Config records.
    allSupported boolean
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    exclusionByResourceTypes ConfigurationRecorderExclusionByResourceTypes
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    includeGlobalResourceTypes boolean
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    recordingStrategy ConfigurationRecorderRecordingStrategy
    An object that specifies the recording strategy for the configuration recorder.
    resourceTypes string[]
    A comma-separated list that specifies which resource types AWS Config records.
    all_supported bool
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    exclusion_by_resource_types ConfigurationRecorderExclusionByResourceTypes
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    include_global_resource_types bool
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    recording_strategy ConfigurationRecorderRecordingStrategy
    An object that specifies the recording strategy for the configuration recorder.
    resource_types Sequence[str]
    A comma-separated list that specifies which resource types AWS Config records.
    allSupported Boolean
    Specifies whether AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types.
    exclusionByResourceTypes Property Map
    An object that specifies how AWS Config excludes resource types from being recorded by the configuration recorder.
    includeGlobalResourceTypes Boolean
    This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies.
    recordingStrategy Property Map
    An object that specifies the recording strategy for the configuration recorder.
    resourceTypes List<String>
    A comma-separated list that specifies which resource types AWS Config records.

    ConfigurationRecorderRecordingMode

    RecordingFrequency string
    The default recording frequency that AWS Config uses to record configuration changes.
    RecordingModeOverrides List<Pulumi.AwsNative.Configuration.Inputs.ConfigurationRecorderRecordingModeOverride>
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    RecordingFrequency string
    The default recording frequency that AWS Config uses to record configuration changes.
    RecordingModeOverrides []ConfigurationRecorderRecordingModeOverride
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    recording_frequency string
    The default recording frequency that AWS Config uses to record configuration changes.
    recording_mode_overrides list(object)
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    recordingFrequency String
    The default recording frequency that AWS Config uses to record configuration changes.
    recordingModeOverrides List<ConfigurationRecorderRecordingModeOverride>
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    recordingFrequency string
    The default recording frequency that AWS Config uses to record configuration changes.
    recordingModeOverrides ConfigurationRecorderRecordingModeOverride[]
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    recording_frequency str
    The default recording frequency that AWS Config uses to record configuration changes.
    recording_mode_overrides Sequence[ConfigurationRecorderRecordingModeOverride]
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.
    recordingFrequency String
    The default recording frequency that AWS Config uses to record configuration changes.
    recordingModeOverrides List<Property Map>
    An array of 'RecordingModeOverride' objects for you to specify your overrides for the recording mode.

    ConfigurationRecorderRecordingModeOverride

    RecordingFrequency string
    The recording frequency that will be applied to all the resource types specified in the override.
    ResourceTypes List<string>
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    Description string
    A description that you provide for the override.
    RecordingFrequency string
    The recording frequency that will be applied to all the resource types specified in the override.
    ResourceTypes []string
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    Description string
    A description that you provide for the override.
    recording_frequency string
    The recording frequency that will be applied to all the resource types specified in the override.
    resource_types list(string)
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    description string
    A description that you provide for the override.
    recordingFrequency String
    The recording frequency that will be applied to all the resource types specified in the override.
    resourceTypes List<String>
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    description String
    A description that you provide for the override.
    recordingFrequency string
    The recording frequency that will be applied to all the resource types specified in the override.
    resourceTypes string[]
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    description string
    A description that you provide for the override.
    recording_frequency str
    The recording frequency that will be applied to all the resource types specified in the override.
    resource_types Sequence[str]
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    description str
    A description that you provide for the override.
    recordingFrequency String
    The recording frequency that will be applied to all the resource types specified in the override.
    resourceTypes List<String>
    A comma-separated list that specifies which resource types AWS Config includes in the override.
    description String
    A description that you provide for the override.

    ConfigurationRecorderRecordingStrategy

    UseOnly string

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    UseOnly string

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    use_only string

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    useOnly String

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    useOnly string

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    use_only str

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)
    useOnly String

    The recording strategy for the configuration recorder.

    • If you set this option to ALL_SUPPORTED_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, excluding the global IAM resource types. You also must set the AllSupported field of RecordingGroup to true . When AWS Config adds support for a new resource type, AWS Config automatically starts recording resources of that type. For a list of supported resource types, see Supported Resource Types in the AWS Config developer guide .
    • If you set this option to INCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for only the resource types that you specify in the ResourceTypes field of RecordingGroup .
    • If you set this option to EXCLUSION_BY_RESOURCE_TYPES , AWS Config records configuration changes for all supported resource types, except the resource types that you specify to exclude from being recorded in the ResourceTypes field of ExclusionByResourceTypes .

    Required and optional fields

    The recordingStrategy field is optional when you set the AllSupported field of RecordingGroup to true .

    The recordingStrategy field is optional when you list resource types in the ResourceTypes field of RecordingGroup .

    The recordingStrategy field is required if you list resource types to exclude from recording in the ResourceTypes field of ExclusionByResourceTypes . > Overriding fields

    If you choose EXCLUSION_BY_RESOURCE_TYPES for the recording strategy, the ExclusionByResourceTypes field will override other properties in the request.

    For example, even if you set IncludeGlobalResourceTypes to false, global IAM resource types will still be automatically recorded in this option unless those resource types are specifically listed as exclusions in the ResourceTypes field of ExclusionByResourceTypes . > Global resource types and the exclusion recording strategy

    By default, if you choose the EXCLUSION_BY_RESOURCE_TYPES recording strategy, when AWS Config adds support for a new resource type in the Region where you set up the configuration recorder, including global resource types, AWS Config starts recording resources of that type automatically.

    Unless specifically listed as exclusions, AWS::RDS::GlobalCluster will be recorded automatically in all supported AWS Config Regions were the configuration recorder is enabled.

    IAM users, groups, roles, and customer managed policies will be recorded in the Region where you set up the configuration recorder if that is a Region where AWS Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by AWS Config after February 2022. This list where you cannot record the global IAM resource types includes the following Regions:

    • Asia Pacific (Hyderabad)
    • Asia Pacific (Melbourne)
    • Canada West (Calgary)
    • Europe (Spain)
    • Europe (Zurich)
    • Israel (Tel Aviv)
    • Middle East (UAE)

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.81.0
    published on Monday, Sep 28, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial