AWS使用日志8--怎么通过AWS Config查找配置了Lifecycle的S3

背景

如果你是一个organization,而且还想获取到所有已经配置了lifecycle跟replication的bucket,那么通过AWS Config可能是最快速的办法

实现

老办法,这里我们使用AWS Config的advanced query功能

1
2
3
4
5
6
7
8
SELECT
resourceId,
resourceType,
supplementaryConfiguration.BucketReplicationConfiguration,
supplementaryConfiguration.BucketLifecycleConfiguration
WHERE
resourceType = 'AWS::S3::Bucket'
AND supplementaryConfiguration.BucketReplicationConfiguration.roleARN LIKE 'arn:aws:iam::%'

supplementaryConfiguration是一些辅助的参数,可以展示一些
如果不确定你要用哪个参数,可以直接写supplementaryConfiguration,先展示整个json