API version 2014-11-12 of the Amazon Config SDK configuration.

You specified an Config rule without a remediation configuration.

The specified time range is not valid. The earlier time is not chronologically before the later time.

Config organization conformance pack that you passed in the filter does not exist.

For DeleteOrganizationConformancePack, you tried to delete an organization conformance pack that does not exist.

The specified Amazon SNS topic does not exist.

Config throws an exception if the recording group does not contain a valid list of resource types. Invalid values might also be incorrectly formatted.

The syntax of the query is incorrect.

Organization is no longer available.

The requested action is not valid.

For PutStoredQuery, you will see this exception if there are missing required fields or if the input value fails the validation, or if you are trying to create more than 300 queries.

For GetStoredQuery, ListStoredQuery, and DeleteStoredQuery you will see this exception if there are missing required fields or if the input value fails the validation.

For PutConfigurationAggregator API, you can see this exception for the following reasons:

• No permission to call EnableAWSServiceAccess API
• The configuration aggregator cannot be updated because your Amazon Web Services Organization management account or the delegated administrator role changed. Delete this aggregator and create a new one with the current Amazon Web Services Organization.
• The configuration aggregator is associated with a previous Amazon Web Services Organization and Config cannot aggregate data with current Amazon Web Services Organization. Delete this aggregator and create a new one with the current Amazon Web Services Organization.
• You are not a registered delegated administrator for Config with permissions to call ListDelegatedAdministrators API. Ensure that the management account registers delagated administrator for Config service principle name before the delegated administrator creates an aggregator.

For all OrganizationConfigRule and OrganizationConformancePack APIs, Config throws an exception if APIs are called from member accounts. All APIs must be called from organization master account.

You have specified a configuration aggregator that does not exist.

You have provided a null or empty role ARN.

The configuration item size is outside the allowable range.

Two users are trying to modify the same query at the same time. Wait for a moment and try again.

You cannot delete the delivery channel you specified because the configuration recorder is running.

You have specified a template that is not valid or supported.

You tried to delete a remediation exception that does not exist.

The specified limit is outside the allowable range.

You have reached the limit (6) of the number of organization conformance packs in an account (6 conformance pack with 25 Config rules per pack per account).

The specified delivery channel name is not valid.

You have reached the limit of the number of tags you can use. You have more than 50 tags.

The specified Amazon KMS Key ARN is not valid.

One or more of the specified parameters are invalid. Verify that your parameters are valid and try again.

The specified ResultToken is invalid.

Config rule that you passed in the filter does not exist.

You specified one or more organization config rules that do not exist.

You have specified a delivery channel that does not exist.

One or more Config rules in the request are invalid. Verify that the rule names are correct and try again.

You specified one or more conformance packs that do not exist.

You have specified a retention configuration that does not exist.

Remediation action is in progress. You can either cancel execution in Amazon Web Services Systems Manager or wait and try again later.

Config resource cannot be created because your organization does not have all features enabled.

Indicates one of the following errors:

• For PutConfigRule, the rule cannot be created because the IAM role assigned to Config lacks permissions to perform the config:Put* action.
• For PutConfigRule, the Lambda function cannot be invoked. Check the function ARN, and check the function's permissions.
• For PutOrganizationConfigRule, organization config rule cannot be created because you do not have permissions to call IAM GetRole action or create a service linked role.

• For PutConformancePack and PutOrganizationConformancePack, a conformance pack cannot be created because you do not have permissions:

  • To call IAM GetRole action or create a service linked role.
  • To read Amazon S3 bucket.

You have specified a resource that is either unknown or has not been discovered.

The specified next token is invalid. Specify the nextToken string that was returned in the previous response to get the next page of results.

Failed to add the retention configuration because a retention configuration with that name already exists.

You have reached the limit (6) of the number of conformance packs in an account (6 conformance pack with 25 Config rules per pack).

Failed to add the Config rule because the account already contains the maximum number of 150 rules. Consider deleting any deactivated rules before you add new rules.

There are no configuration recorders available to provide the role needed to describe your resources. Create a configuration recorder.

The specified Amazon S3 bucket does not exist.

You have reached the limit (100,000) of active custom resource types in your account. Delete unused resources using DeleteResourceConfig.

There is no delivery channel available to record configurations.

You have specified a template that is not valid or supported.

You have provided a configuration recorder name that is not valid.

There is no configuration recorder running.

You have reached the limit of the number of recorders you can create.

Your Amazon S3 bucket policy does not permit Config to write to it.

You have reached the limit of the number of delivery channels you can create.

You have reached the limit of the number of organization config rules you can create.

You have specified a resource that does not exist.

You have specified a configuration recorder that does not exist.

The specified Amazon S3 key prefix is not valid.

For StartConfigRulesEvaluation API, this exception is thrown if an evaluation is in progress or if you call the StartConfigRulesEvaluation API more than once per minute.

For PutConfigurationAggregator API, this exception is thrown if the number of accounts and aggregators exceeds the limit.

You see this exception in the following cases:

• For DeleteConfigRule, Config is deleting this rule. Try your request again later.
• For DeleteConfigRule, the rule is deleting your evaluation results. Try your request again later.
• For DeleteConfigRule, a remediation action is associated with the rule and Config cannot delete this rule. Delete the remediation action associated with the rule before deleting the rule and try your request again later.
• For PutConfigOrganizationRule, organization config rule deletion is in progress. Try your request again later.
• For DeleteOrganizationConfigRule, organization config rule creation is in progress. Try your request again later.
• For PutConformancePack and PutOrganizationConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.
• For DeleteConformancePack, a conformance pack creation, update, and deletion is in progress. Try your request again later.