tb_pulumi.cfg

Patterns related to AWS Config integration.

class tb_pulumi.cfg.AwsConfigAccount(name: str, project: ThunderbirdPulumiProject, delivery_email: str = '', aggregator_stack: bool = False, opts: ResourceOptions = None, tags: dict = {}, **kwargs)

Bases: ThunderbirdComponentResource

Pulumi Type: tb:cfg:ConfigAccount Enable and Configure AWS Config for an account/region.

Produces the following resources:

• delivery_bucket - aws.s3.Bucket The S3 Bucket created for AWS Config delivery.

• delivery_bucket_policy - aws.s3.BucketPolicy The S3 Bucket Policy for the delivery bucket.

• recorder - aws.cfg.Recorder The AWS Config Recorder created for the account/region.

• recorder_status - aws.cfg.RecorderStatus The AWS Config Recorder Status to enable the recorder.

• delivery_channel - aws.cfg.DeliveryChannel The AWS Config Delivery Channel created for the account/region.

• aggregator_account - aws.cfg.AggregatorAccount The AWS Config Aggregator for the account/region (if enabled).

Parameters:

• name (str) – A string identifying this set of resources.

• project (tb_pulumi.ThunderbirdPulumiProject) – The ThunderbirdPulumiProject to add these resources to.

• delivery_email (str) – The email address to send AWS Config notifications to (if aggregator_stack is True).

• aggregator_stack (bool) – Whether this stack is the aggregator stack. An aggregator stack in a region will accumulate data from all enabled regions/accounts.

• opts (pulumi.ResourceOptions, optional) – Additional pulumi.ResourceOptions to apply to these resources. Defaults to None.

• tags (dict) – Tags to apply to the resources.