StartConfigRulesEvaluation
when you want to test a rule that you updated is working as expected. StartConfigRulesEvaluation
does not re-record the latest configuration state for your resources; it re-runs an evaluation against the last known state of your resources. You can specify up to 25 Config rules per request.
An existing StartConfigRulesEvaluation
call must complete for the specified rules before you can call the API again. If you chose to have AWS Config stream to an Amazon SNS topic, you will receive a ConfigRuleEvaluationStarted
notification when the evaluation starts.
You don't need to call the StartConfigRulesEvaluation
API to run an evaluation for a new rule. When you create a new rule, AWS Config automatically evaluates your resources against the rule.
The StartConfigRulesEvaluation
API is useful if you want to run on-demand evaluations, such as the following example:
You have a custom rule that evaluates your IAM resources every 24 hours.
You update your Lambda function to add additional conditions to your rule.
Instead of waiting for the next periodic evaluation, you call the StartConfigRulesEvaluation
API.
AWS Config invokes your Lambda function and evaluates your IAM resources.
Your custom rule will still run periodic evaluations every 24 hours.