awslabs/aws-config-rules

Can't install some Python AWS config rules

HalinGG opened this issue · 2 comments

Hi, some rules don't have a parameters.json and therefore can't be deployed with the RDK.

One example:

https://github.com/awslabs/aws-config-rules/blob/master/python/cloudtrail_encrypted.py

How can I install the python AWS config rules that are just a python file like this?

I'm trying to install all the rules here:
https://github.com/awslabs/aws-config-rules/blob/master/python

Thank you,

Halin

Hi Halin, some of the rules are legacy and have not been develop via the RDK. In addition, we got contributor who asked to access to code as example, instead of just the parameters.json for managed rules (I just did a revert).

To answer your question, you'd require to put the code in a new directory, and add a parameters.json. The RDK would be able to deploy it. BUT in this case, I'd suggest you deploy the managed rule: https://docs.aws.amazon.com/config/latest/developerguide/cloud-trail-encryption-enabled.html

You can see an example of a parameters.json for managed rule here: https://github.com/awslabs/aws-config-rules/blob/master/python/ACM_CERTIFICATE_EXPIRATION_CHECK/parameters.json

@jongogogo thank you!! That explains it.