Docs Packages
  1. Packages
  2. AWS Native
  3. API Docs
  4. iot
  5. AccountAuditConfiguration

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.103.0 published on Monday, Apr 22, 2024 by Pulumi
pulumi/pulumi-aws-native

aws-native.iot.AccountAuditConfiguration

Explore with Pulumi AI

aws-native logo

AWS Native is in preview. AWS Classic is fully supported.

AWS Native v0.103.0 published on Monday, Apr 22, 2024 by Pulumi
pulumi/pulumi-aws-native

    Configures the Device Defender audit settings for this account. Settings include how audit notifications are sent and which audit checks are enabled or disabled.

    Create AccountAuditConfiguration Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AccountAuditConfiguration(name: string, args: AccountAuditConfigurationArgs, opts?: CustomResourceOptions);
    @overload
def AccountAuditConfiguration(resource_name: str,
                              args: AccountAuditConfigurationArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def AccountAuditConfiguration(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              account_id: Optional[str] = None,
                              audit_check_configurations: Optional[AccountAuditConfigurationAuditCheckConfigurationsArgs] = None,
                              role_arn: Optional[str] = None,
                              audit_notification_target_configurations: Optional[AccountAuditConfigurationAuditNotificationTargetConfigurationsArgs] = None)
    func NewAccountAuditConfiguration(ctx *Context, name string, args AccountAuditConfigurationArgs, opts ...ResourceOption) (*AccountAuditConfiguration, error)
    public AccountAuditConfiguration(string name, AccountAuditConfigurationArgs args, CustomResourceOptions? opts = null)
    public AccountAuditConfiguration(String name, AccountAuditConfigurationArgs args)
public AccountAuditConfiguration(String name, AccountAuditConfigurationArgs args, CustomResourceOptions options)

    type: aws-native:iot:AccountAuditConfiguration
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args AccountAuditConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AccountAuditConfigurationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AccountAuditConfigurationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AccountAuditConfigurationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AccountAuditConfigurationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Example

    The following reference example uses placeholder values for all input properties.

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    const accountAuditConfigurationResource = new aws_native.iot.AccountAuditConfiguration("accountAuditConfigurationResource", {
    accountId: "string",
    auditCheckConfigurations: {
        authenticatedCognitoRoleOverlyPermissiveCheck: {
            enabled: false,
        },
        caCertificateExpiringCheck: {
            enabled: false,
        },
        caCertificateKeyQualityCheck: {
            enabled: false,
        },
        conflictingClientIdsCheck: {
            enabled: false,
        },
        deviceCertificateExpiringCheck: {
            enabled: false,
        },
        deviceCertificateKeyQualityCheck: {
            enabled: false,
        },
        deviceCertificateSharedCheck: {
            enabled: false,
        },
        intermediateCaRevokedForActiveDeviceCertificatesCheck: {
            enabled: false,
        },
        ioTPolicyPotentialMisConfigurationCheck: {
            enabled: false,
        },
        iotPolicyOverlyPermissiveCheck: {
            enabled: false,
        },
        iotRoleAliasAllowsAccessToUnusedServicesCheck: {
            enabled: false,
        },
        iotRoleAliasOverlyPermissiveCheck: {
            enabled: false,
        },
        loggingDisabledCheck: {
            enabled: false,
        },
        revokedCaCertificateStillActiveCheck: {
            enabled: false,
        },
        revokedDeviceCertificateStillActiveCheck: {
            enabled: false,
        },
        unauthenticatedCognitoRoleOverlyPermissiveCheck: {
            enabled: false,
        },
    },
    roleArn: "string",
    auditNotificationTargetConfigurations: {
        sns: {
            enabled: false,
            roleArn: "string",
            targetArn: "string",
        },
    },
});

    Coming soon!

    AccountAuditConfiguration Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The AccountAuditConfiguration resource accepts the following input properties:

    AccountId string
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    AuditCheckConfigurations Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfigurations
    RoleArn string
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    AuditNotificationTargetConfigurations Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditNotificationTargetConfigurations
    AccountId string
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    AuditCheckConfigurations AccountAuditConfigurationAuditCheckConfigurationsArgs
    RoleArn string
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    AuditNotificationTargetConfigurations AccountAuditConfigurationAuditNotificationTargetConfigurationsArgs
    accountId String
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    auditCheckConfigurations AccountAuditConfigurationAuditCheckConfigurations
    roleArn String
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    auditNotificationTargetConfigurations AccountAuditConfigurationAuditNotificationTargetConfigurations
    accountId string
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    auditCheckConfigurations AccountAuditConfigurationAuditCheckConfigurations
    roleArn string
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    auditNotificationTargetConfigurations AccountAuditConfigurationAuditNotificationTargetConfigurations
    account_id str
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    audit_check_configurations AccountAuditConfigurationAuditCheckConfigurationsArgs
    role_arn str
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    audit_notification_target_configurations AccountAuditConfigurationAuditNotificationTargetConfigurationsArgs
    accountId String
    Your 12-digit account ID (used as the primary identifier for the CloudFormation resource).
    auditCheckConfigurations Property Map
    roleArn String
    The ARN of the role that grants permission to AWS IoT to access information about your devices, policies, certificates and other items as required when performing an audit.
    auditNotificationTargetConfigurations Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AccountAuditConfiguration resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    AccountAuditConfigurationAuditCheckConfiguration, AccountAuditConfigurationAuditCheckConfigurationArgs

    Enabled bool
    True if the check is enabled.
    Enabled bool
    True if the check is enabled.
    enabled Boolean
    True if the check is enabled.
    enabled boolean
    True if the check is enabled.
    enabled bool
    True if the check is enabled.
    enabled Boolean
    True if the check is enabled.

    AccountAuditConfigurationAuditCheckConfigurations, AccountAuditConfigurationAuditCheckConfigurationsArgs

    AuthenticatedCognitoRoleOverlyPermissiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    CaCertificateExpiringCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    CaCertificateKeyQualityCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    ConflictingClientIdsCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateExpiringCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateKeyQualityCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateSharedCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    IntermediateCaRevokedForActiveDeviceCertificatesCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    IoTPolicyPotentialMisConfigurationCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    IotPolicyOverlyPermissiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    IotRoleAliasAllowsAccessToUnusedServicesCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    IotRoleAliasOverlyPermissiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    LoggingDisabledCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    RevokedCaCertificateStillActiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    RevokedDeviceCertificateStillActiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    UnauthenticatedCognitoRoleOverlyPermissiveCheck Pulumi.AwsNative.IoT.Inputs.AccountAuditConfigurationAuditCheckConfiguration
    AuthenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    CaCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    CaCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    ConflictingClientIdsCheck AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    DeviceCertificateSharedCheck AccountAuditConfigurationAuditCheckConfiguration
    IntermediateCaRevokedForActiveDeviceCertificatesCheck AccountAuditConfigurationAuditCheckConfiguration
    IoTPolicyPotentialMisConfigurationCheck AccountAuditConfigurationAuditCheckConfiguration
    IotPolicyOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    IotRoleAliasAllowsAccessToUnusedServicesCheck AccountAuditConfigurationAuditCheckConfiguration
    IotRoleAliasOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    LoggingDisabledCheck AccountAuditConfigurationAuditCheckConfiguration
    RevokedCaCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    RevokedDeviceCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    UnauthenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    authenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    caCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    caCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    conflictingClientIdsCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateSharedCheck AccountAuditConfigurationAuditCheckConfiguration
    intermediateCaRevokedForActiveDeviceCertificatesCheck AccountAuditConfigurationAuditCheckConfiguration
    ioTPolicyPotentialMisConfigurationCheck AccountAuditConfigurationAuditCheckConfiguration
    iotPolicyOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    iotRoleAliasAllowsAccessToUnusedServicesCheck AccountAuditConfigurationAuditCheckConfiguration
    iotRoleAliasOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    loggingDisabledCheck AccountAuditConfigurationAuditCheckConfiguration
    revokedCaCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    revokedDeviceCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    unauthenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    authenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    caCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    caCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    conflictingClientIdsCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateExpiringCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateKeyQualityCheck AccountAuditConfigurationAuditCheckConfiguration
    deviceCertificateSharedCheck AccountAuditConfigurationAuditCheckConfiguration
    intermediateCaRevokedForActiveDeviceCertificatesCheck AccountAuditConfigurationAuditCheckConfiguration
    ioTPolicyPotentialMisConfigurationCheck AccountAuditConfigurationAuditCheckConfiguration
    iotPolicyOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    iotRoleAliasAllowsAccessToUnusedServicesCheck AccountAuditConfigurationAuditCheckConfiguration
    iotRoleAliasOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    loggingDisabledCheck AccountAuditConfigurationAuditCheckConfiguration
    revokedCaCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    revokedDeviceCertificateStillActiveCheck AccountAuditConfigurationAuditCheckConfiguration
    unauthenticatedCognitoRoleOverlyPermissiveCheck AccountAuditConfigurationAuditCheckConfiguration
    authenticated_cognito_role_overly_permissive_check AccountAuditConfigurationAuditCheckConfiguration
    ca_certificate_expiring_check AccountAuditConfigurationAuditCheckConfiguration
    ca_certificate_key_quality_check AccountAuditConfigurationAuditCheckConfiguration
    conflicting_client_ids_check AccountAuditConfigurationAuditCheckConfiguration
    device_certificate_expiring_check AccountAuditConfigurationAuditCheckConfiguration
    device_certificate_key_quality_check AccountAuditConfigurationAuditCheckConfiguration
    device_certificate_shared_check AccountAuditConfigurationAuditCheckConfiguration
    intermediate_ca_revoked_for_active_device_certificates_check AccountAuditConfigurationAuditCheckConfiguration
    io_t_policy_potential_mis_configuration_check AccountAuditConfigurationAuditCheckConfiguration
    iot_policy_overly_permissive_check AccountAuditConfigurationAuditCheckConfiguration
    iot_role_alias_allows_access_to_unused_services_check AccountAuditConfigurationAuditCheckConfiguration
    iot_role_alias_overly_permissive_check AccountAuditConfigurationAuditCheckConfiguration
    logging_disabled_check AccountAuditConfigurationAuditCheckConfiguration
    revoked_ca_certificate_still_active_check AccountAuditConfigurationAuditCheckConfiguration
    revoked_device_certificate_still_active_check AccountAuditConfigurationAuditCheckConfiguration
    unauthenticated_cognito_role_overly_permissive_check AccountAuditConfigurationAuditCheckConfiguration

    AccountAuditConfigurationAuditNotificationTarget, AccountAuditConfigurationAuditNotificationTargetArgs

    Enabled bool
    True if notifications to the target are enabled.
    RoleArn string
    The ARN of the role that grants permission to send notifications to the target.
    TargetArn string
    The ARN of the target (SNS topic) to which audit notifications are sent.
    Enabled bool
    True if notifications to the target are enabled.
    RoleArn string
    The ARN of the role that grants permission to send notifications to the target.
    TargetArn string
    The ARN of the target (SNS topic) to which audit notifications are sent.
    enabled Boolean
    True if notifications to the target are enabled.
    roleArn String
    The ARN of the role that grants permission to send notifications to the target.
    targetArn String
    The ARN of the target (SNS topic) to which audit notifications are sent.
    enabled boolean
    True if notifications to the target are enabled.
    roleArn string
    The ARN of the role that grants permission to send notifications to the target.
    targetArn string
    The ARN of the target (SNS topic) to which audit notifications are sent.
    enabled bool
    True if notifications to the target are enabled.
    role_arn str
    The ARN of the role that grants permission to send notifications to the target.
    target_arn str
    The ARN of the target (SNS topic) to which audit notifications are sent.
    enabled Boolean
    True if notifications to the target are enabled.
    roleArn String
    The ARN of the role that grants permission to send notifications to the target.
    targetArn String
    The ARN of the target (SNS topic) to which audit notifications are sent.

    AccountAuditConfigurationAuditNotificationTargetConfigurations, AccountAuditConfigurationAuditNotificationTargetConfigurationsArgs

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    AWS Native is in preview. AWS Classic is fully supported.

    AWS Native v0.103.0 published on Monday, Apr 22, 2024 by Pulumi
    pulumi/pulumi-aws-native