Aws config

evaluation all rule

#!/bin/bash

# List all AWS Config rules
config_rules=$(aws configservice describe-config-rules --query 'ConfigRules[].ConfigRuleName' --output text)

# Iterate over each rule to find non-compliant items
for rule in $config_rules; do
  echo "Checking rule: $rule"
  
  # Get non-compliant resources for each rule
  aws configservice get-compliance-details-by-config-rule \
    --config-rule-name "$rule" \
    --compliance-types NON_COMPLIANT \
    --query 'EvaluationResults[].{ResourceID:EvaluationResultIdentifier.EvaluationResultQualifier.ResourceId, ResourceType:EvaluationResultIdentifier.EvaluationResultQualifier.ResourceType, ComplianceType:ComplianceType, Annotation:Annotation}' \
    --output json
done