Resource Evaluations

Fetches a list of proactive resource evaluations.

Details

AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. This input connector retrieves proactive resource evaluations from AWS Config, which help you assess whether your AWS resources comply with your organization's policies and best practices before they are deployed.

Functionality

On initialization, Monad connects to AWS Config in the specified region and retrieves proactive resource evaluations. The connector maintains state to ensure incremental updates on subsequent runs, collecting only new evaluations since the last sync to minimize duplicates and API calls. You can optionally filter evaluations by evaluation context identifier to focus on specific infrastructure deployments.

Requirements

• IAM Role Assumption / Static Credentials
• Example permission to attach to the role/user:

{
    "Version": "2012-10-17",
    "Statement": [
        {
        "Sid": "",
        "Effect": "Allow",
        "Action": [
            "config:GetResourceEvaluationSummary",
            "config:ListResourceEvaluations"
        ],
        "Resource": "*"
        }
    ]
}

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
Region	string	Yes	The AWS region where AWS Config is enabled.
Role ARN	string	Yes	The ARN of the IAM role to assume for accessing AWS Config.
Cron	string	Yes	Cron expression for scheduling the input.
Evaluation Context Identifier	string	No	Filters proactive resource evaluations for a given infrastructure deployment.

Secrets (Static Credentials Only)

Setting	Type	Required	Description
Access Key	string	Conditional	AWS Access Key ID
Secret Key	string	Conditional	AWS Secret Access Key

⚠️ Authentication: Choose either Role ARN (recommended) or static credentials. See AWS Authentication Guide for setup instructions.

Related Articles

• AWS Config User Guide
• Resource Evaluations API Reference

Sample Record

{
  "EvaluationMode": "PROACTIVE",
  "EvaluationStartTimestamp": "2025-08-11T23:46:56.550161Z",
  "ResourceEvaluationId": "fb4c6544-fac9-adab-a731-52351349d271"
}