Copy page

AWS

Resource Evaluations

Fetches a list of proactive resource evaluations.

Sync Type: Full Synchronisation

Details

AWS Config provides a detailed view of the configuration of AWS resources in your AWS account. This input connector retrieves proactive resource evaluations from AWS Config, which help you assess whether your AWS resources comply with your organization's policies and best practices before they are deployed.

Functionality

On each sync, Monad connects to AWS Config in the specified region and lists every proactive resource evaluation. Every evaluation is emitted again on each sync; the input does not track which evaluations it has already sent. You can optionally filter evaluations by evaluation context identifier to focus on specific infrastructure deployments. Each record holds only the evaluation's ID, evaluation mode and start time, not its compliance result. To see whether a resource passed an evaluation, look up the evaluation in AWS Config by its ResourceEvaluationId.

Requirements

• IAM Role Assumption / Static Credentials
• Example permission to attach to the role/user:

Code
{
    "Version": "2012-10-17",
    "Statement": [
        {
        "Sid": "",
        "Effect": "Allow",
        "Action": [
            "config:ListResourceEvaluations"
        ],
        "Resource": "*"
        }
    ]
}

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Default	Description
cron	string (cron)	Yes	0 * * * *	Cron string for scheduling the ingest of your input. eg: 0 0 * * * - Daily at midnight, or */15 * * * * - Every 15 minutes. Defaults to an hour.
role_arn	string	No	-	The ARN of the IAM role to assume for accessing AWS resources.
region	string	Yes	us-east-1	The AWS region to use. Allowed values: us-east-1, us-east-2, us-west-1, us-west-2, af-south-1, ap-east-1, ap-south-1, ap-northeast-1, ap-northeast-2, ap-northeast-3, ap-southeast-1, ap-southeast-2, ca-central-1, ca-west-1, cn-north-1, cn-northwest-1, eu-central-1, eu-west-1, eu-west-2, eu-west-3, eu-north-1, eu-south-1, me-south-1, sa-east-1, us-gov-east-1, us-gov-west-1.
evaluation_context_identifier	string	No	-	Filters proactive resource evaluations for a given infrastructure deployment.
use_synthetic_data	bool	No	false	Generate synthetic data for testing, instead of connecting to a real data source. Defaults to an hourly cron schedule for cron-based inputs.

Secrets (Static Credentials Only)

Secret	Type	Required	Description
access_key	secret	No	The Access Key from AWS to authenticate with AWS
secret_key	secret	No	The Secret Key from AWS to authenticate with AWS

⚠️ Authentication: Choose either Role ARN (recommended) or static credentials. See AWS Authentication Guide for setup instructions.

Related Articles

• AWS Config User Guide
• Resource Evaluations API Reference

Sample Record

Code
{
  "EvaluationMode": "PROACTIVE",
  "EvaluationStartTimestamp": "2025-08-11T23:46:56.550161Z",
  "ResourceEvaluationId": "fb4c6544-fac9-adab-a731-52351349d271"
}

Sync frequency

This input runs on a cron schedule (default hourly, 0 * * * *), which you can configure on the pipeline. See Input Sync Frequency for details.