aws_config.json

{
  "action": "CheckCompliance",
  "local-test": true,
  "event": {
    "id": "1234abcd-12ab-34cd-56ef-1234567890ab",
    "detail-type": "Config Rules Compliance Change",
    "source": "aws.config",
    "account": "123456789012",
    "time": "2023-06-15T10:30:00Z",
    "region": "us-west-2",
    "resources": ["arn:aws:s3:::example-bucket"],
    "detail": {
      "configRuleName": "s3-bucket-public-read-prohibited",
      "awsAccountId": "123456789012",
      "configRuleARN": "arn:aws:config:us-west-2:123456789012:config-rule/config-rule-abcdef",
      "resourceType": "AWS::S3::Bucket",
      "resourceId": "example-bucket",
      "awsRegion": "us-west-2",
      "newEvaluationResult": {
        "evaluationResultIdentifier": {
          "evaluationResultQualifier": {
            "configRuleName": "s3-bucket-public-read-prohibited",
            "resourceType": "AWS::S3::Bucket",
            "resourceId": "example-bucket"
          },
          "orderingTimestamp": "2023-06-15T10:29:55Z"
        },
        "complianceType": "NON_COMPLIANT",
        "resultRecordedTime": "2023-06-15T10:30:00Z",
        "configRuleInvokedTime": "2023-06-15T10:29:50Z"
      },
      "notificationCreationTime": "2023-06-15T10:30:00Z",
      "messageType": "ComplianceChangeNotification",
      "recordVersion": "1.0"
    }
  }
}