libZSservicesZSamazonka-fmsZSamazonka-fms
Copyright(c) 2013-2021 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay <brendan.g.hay+amazonka@gmail.com>
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellNone

Amazonka.FMS.GetComplianceDetail

Description

Returns detailed compliance information about the specified member account. Details include resources that are in and out of compliance with the specified policy.

  • Resources are considered noncompliant for WAF and Shield Advanced policies if the specified policy has not been applied to them.
  • Resources are considered noncompliant for security group policies if they are in scope of the policy, they violate one or more of the policy rules, and remediation is disabled or not possible.
  • Resources are considered noncompliant for Network Firewall policies if a firewall is missing in the VPC, if the firewall endpoint isn't set up in an expected Availability Zone and subnet, if a subnet created by the Firewall Manager doesn't have the expected route table, and for modifications to a firewall policy that violate the Firewall Manager policy's rules.
  • Resources are considered noncompliant for DNS Firewall policies if a DNS Firewall rule group is missing from the rule group associations for the VPC.
Synopsis

Creating a Request

data GetComplianceDetail Source #

See: newGetComplianceDetail smart constructor.

Constructors

GetComplianceDetail' 

Fields

  • policyId :: Text

    The ID of the policy that you want to get the details for. PolicyId is returned by PutPolicy and by ListPolicies.

  • memberAccount :: Text

    The Amazon Web Services account that owns the resources that you want to get the details for.

Instances

Instances details
Eq GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Read GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Show GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Generic GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Associated Types

type Rep GetComplianceDetail :: Type -> Type #

NFData GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Methods

rnf :: GetComplianceDetail -> () #

Hashable GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

ToJSON GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

AWSRequest GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Associated Types

type AWSResponse GetComplianceDetail #

ToHeaders GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

ToPath GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

ToQuery GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

type Rep GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

type Rep GetComplianceDetail = D1 ('MetaData "GetComplianceDetail" "Amazonka.FMS.GetComplianceDetail" "libZSservicesZSamazonka-fmsZSamazonka-fms" 'False) (C1 ('MetaCons "GetComplianceDetail'" 'PrefixI 'True) (S1 ('MetaSel ('Just "policyId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "memberAccount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text)))
type AWSResponse GetComplianceDetail Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

newGetComplianceDetail Source #

Create a value of GetComplianceDetail with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:policyId:GetComplianceDetail', getComplianceDetail_policyId - The ID of the policy that you want to get the details for. PolicyId is returned by PutPolicy and by ListPolicies.

$sel:memberAccount:GetComplianceDetail', getComplianceDetail_memberAccount - The Amazon Web Services account that owns the resources that you want to get the details for.

Request Lenses

getComplianceDetail_policyId :: Lens' GetComplianceDetail Text Source #

The ID of the policy that you want to get the details for. PolicyId is returned by PutPolicy and by ListPolicies.

getComplianceDetail_memberAccount :: Lens' GetComplianceDetail Text Source #

The Amazon Web Services account that owns the resources that you want to get the details for.

Destructuring the Response

data GetComplianceDetailResponse Source #

See: newGetComplianceDetailResponse smart constructor.

Constructors

GetComplianceDetailResponse' 

Fields

Instances

Instances details
Eq GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Read GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Show GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Generic GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

Associated Types

type Rep GetComplianceDetailResponse :: Type -> Type #

NFData GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

type Rep GetComplianceDetailResponse Source # 
Instance details

Defined in Amazonka.FMS.GetComplianceDetail

type Rep GetComplianceDetailResponse = D1 ('MetaData "GetComplianceDetailResponse" "Amazonka.FMS.GetComplianceDetail" "libZSservicesZSamazonka-fmsZSamazonka-fms" 'False) (C1 ('MetaCons "GetComplianceDetailResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "policyComplianceDetail") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe PolicyComplianceDetail)) :*: S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int)))

newGetComplianceDetailResponse Source #

Create a value of GetComplianceDetailResponse with all optional fields omitted.

Use generic-lens or optics to modify other optional fields.

The following record fields are available, with the corresponding lenses provided for backwards compatibility:

$sel:policyComplianceDetail:GetComplianceDetailResponse', getComplianceDetailResponse_policyComplianceDetail - Information about the resources and the policy that you specified in the GetComplianceDetail request.

$sel:httpStatus:GetComplianceDetailResponse', getComplianceDetailResponse_httpStatus - The response's http status code.

Response Lenses

getComplianceDetailResponse_policyComplianceDetail :: Lens' GetComplianceDetailResponse (Maybe PolicyComplianceDetail) Source #

Information about the resources and the policy that you specified in the GetComplianceDetail request.