2026/07/07 - AWS Config - 5 new 6 updated api methods
Changes Added support for connecting AWS Config to third-party cloud service providers. New APIs include PutConnector, GetConnector, DeleteConnector, and ListConnectors for managing connectors, and PutThirdPartyServiceLinkedConfigurationRecorder for creating third-party service-linked recorders.
Creates a connector that specifies the connection between a third-party cloud service provider and Config.
A connector is required to create a service-linked configuration recorder for a third-party cloud service provider using the PutThirdPartyServiceLinkedConfigurationRecorder operation.
This API creates a service-linked role AWSServiceRoleForConfigThirdParty in your account. The service-linked role is created only when the role does not exist in your account.
See also: AWS API Documentation
Request Syntax
client.put_connector(
ConnectorConfiguration={
'azure': {
'tenantIdentifier': 'string',
'clientIdentifier': 'string'
}
},
Tags=[
{
'Key': 'string',
'Value': 'string'
},
]
)
dict
[REQUIRED]
The provider-specific configuration for connecting to the third-party cloud service provider.
azure (dict) --
The configuration for an Azure connector.
tenantIdentifier (string) -- [REQUIRED]
The Azure tenant identifier.
clientIdentifier (string) -- [REQUIRED]
The Azure client identifier.
list
The tags for the connector. Each tag consists of a key and an optional value, both of which you define.
(dict) --
The tags for the resource. The metadata that you apply to a resource to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
Key (string) --
One part of a key-value pair that make up a tag. A key is a general label that acts like a category for more specific tag values.
Value (string) --
The optional part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key).
dict
Response Syntax
{
'Arn': 'string'
}
Response Structure
(dict) --
Arn (string) --
The Amazon Resource Name (ARN) of the connector.
Returns a list of connectors depending on the filters you specify.
See also: AWS API Documentation
Request Syntax
client.list_connectors(
MaxResults=123,
NextToken='string',
Filters=[
{
'filterName': 'provider',
'filterValues': [
'string',
]
},
]
)
integer
The maximum number of results to include in the response.
string
The NextToken string returned on a previous page that you use to get the next page of results in a paginated response.
list
Filters the results based on a list of ConnectorFilter objects that you specify.
(dict) --
Filters connectors based on the connector provider.
filterName (string) --
The name of the filter. Currently, only provider is supported.
filterValues (list) --
The value of the filter. For provider, valid values include: AZURE.
(string) --
dict
Response Syntax
{
'ConnectorSummaries': [
{
'arn': 'string',
'name': 'string',
'provider': 'AZURE',
'tenantIdentifier': 'string',
'createdTime': datetime(2015, 1, 1)
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
ConnectorSummaries (list) --
A list of ConnectorSummary objects.
(dict) --
A summary of a connector.
arn (string) --
The Amazon Resource Name (ARN) of the connector.
name (string) --
The name of the connector.
provider (string) --
The third-party cloud service provider. Currently, AZURE is supported.
tenantIdentifier (string) --
The Azure tenant identifier for the connector.
createdTime (datetime) --
The date and time that the connector was created.
NextToken (string) --
The NextToken string returned on a previous page that you use to get the next page of results in a paginated response.
Returns the details of the specified connector.
See also: AWS API Documentation
Request Syntax
client.get_connector(
Arn='string'
)
string
[REQUIRED]
The Amazon Resource Name (ARN) of the connector.
dict
Response Syntax
{
'Connector': {
'name': 'string',
'arn': 'string',
'connectorConfiguration': {
'azure': {
'tenantIdentifier': 'string',
'clientIdentifier': 'string'
}
},
'createdTime': datetime(2015, 1, 1)
}
}
Response Structure
(dict) --
Connector (dict) --
The details of the specified connector.
name (string) --
The name of the connector.
arn (string) --
The Amazon Resource Name (ARN) of the connector.
connectorConfiguration (dict) --
The provider-specific configuration for connecting to the third-party cloud service provider.
azure (dict) --
The configuration for an Azure connector.
tenantIdentifier (string) --
The Azure tenant identifier.
clientIdentifier (string) --
The Azure client identifier.
createdTime (datetime) --
The date and time that the connector was created.
Creates or updates a service-linked configuration recorder that is linked to a third-party cloud service provider based on the ConnectorArn you specify.
The configuration recorder's name, recordingGroup, recordingMode, and recordingScope is set by the service that is linked to the configuration recorder.
If a service-linked configuration recorder already exists for the specified service principal and connector, calling this operation again updates the ScopeConfiguration.
See also: AWS API Documentation
Request Syntax
client.put_third_party_service_linked_configuration_recorder(
ServicePrincipal='string',
ConnectorArn='string',
ScopeConfiguration={
'scopeType': 'string',
'scopeValues': [
'string',
],
'allRegions': True|False,
'includedRegions': [
'string',
]
},
Tags=[
{
'Key': 'string',
'Value': 'string'
},
]
)
string
[REQUIRED]
The service principal of the Amazon Web Services service for the service-linked configuration recorder that you want to create.
string
[REQUIRED]
The Amazon Resource Name (ARN) of the connector that specifies the connection between the third-party cloud service provider and Config. The specified connector must exist.
dict
[REQUIRED]
Specifies the scope of resources to record from the third-party cloud service provider.
scopeType (string) -- [REQUIRED]
The type of scope for the third-party cloud resources. Valid values include tenant and subscription.
scopeValues (list) --
The list of specific scope values for the third-party cloud resources. For example, a list of Azure subscriptions or management groups.
(string) --
allRegions (boolean) -- [REQUIRED]
Specifies whether to record resources from all supported regions for the third-party cloud service provider.
includedRegions (list) --
The list of regions from the third-party cloud service provider to include when recording resources. Used when allRegions is set to false.
(string) --
list
The tags for a service-linked configuration recorder. Each tag consists of a key and an optional value, both of which you define.
(dict) --
The tags for the resource. The metadata that you apply to a resource to help you categorize and organize them. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
Key (string) --
One part of a key-value pair that make up a tag. A key is a general label that acts like a category for more specific tag values.
Value (string) --
The optional part of a key-value pair that make up a tag. A value acts as a descriptor within a tag category (key).
dict
Response Syntax
{
'Arn': 'string',
'Name': 'string'
}
Response Structure
(dict) --
Arn (string) --
The Amazon Resource Name (ARN) of the specified configuration recorder.
Name (string) --
The name of the specified configuration recorder.
Deletes the specified connector.
See also: AWS API Documentation
Request Syntax
client.delete_connector(
Arn='string'
)
string
[REQUIRED]
The Amazon Resource Name (ARN) of the connector that you want to delete.
None
{'ConfigurationRecorder': {'connectorArn': 'string',
'scopeConfiguration': {'allRegions': 'boolean',
'includedRegions': ['string'],
'scopeType': 'string',
'scopeValues': ['string']}}}
{'Arn': 'string'}
Deletes an existing service-linked configuration recorder.
This operation does not delete the configuration information that was previously recorded. You will be able to access the previously recorded information by using the GetResourceConfigHistory operation, but you will not be able to access this information in the Config console until you have created a new service-linked configuration recorder for the same service.
See also: AWS API Documentation
Request Syntax
client.delete_service_linked_configuration_recorder(
ServicePrincipal='string',
Arn='string'
)
string
The service principal of the Amazon Web Services service for the service-linked configuration recorder that you want to delete. This field is only supported for Amazon Web Services service principals. For third-party service-linked configuration recorders, use Arn instead.
string
The Amazon Resource Name (ARN) of the service-linked configuration recorder that you want to delete. For third-party service-linked configuration recorders, you must use Arn. You must specify exactly one of Arn or ServicePrincipal.
dict
Response Syntax
{
'Arn': 'string',
'Name': 'string'
}
Response Structure
(dict) --
Arn (string) --
The Amazon Resource Name (ARN) of the specified configuration recorder.
Name (string) --
The name of the specified configuration recorder.
{'ConfigurationRecorders': {'connectorArn': 'string',
'scopeConfiguration': {'allRegions': 'boolean',
'includedRegions': ['string'],
'scopeType': 'string',
'scopeValues': ['string']}}}
{'ConfigurationRecorder': {'connectorArn': 'string',
'scopeConfiguration': {'allRegions': 'boolean',
'includedRegions': ['string'],
'scopeType': 'string',
'scopeValues': ['string']}}}
{'ConfigurationRecorderSummaries': {'provider': 'AZURE'}}
Returns a list of configuration recorders depending on the filters you specify.
See also: AWS API Documentation
Request Syntax
client.list_configuration_recorders(
Filters=[
{
'filterName': 'recordingScope',
'filterValue': [
'string',
]
},
],
MaxResults=123,
NextToken='string'
)
list
Filters the results based on a list of ConfigurationRecorderFilter objects that you specify.
(dict) --
Filters configuration recorders by recording scope.
filterName (string) --
The name of the type of filter. Currently, only recordingScope is supported.
filterValue (list) --
The value of the filter. For recordingScope, valid values include: INTERNAL and PAID.
INTERNAL indicates that the ConfigurationItems in scope for the configuration recorder are recorded for free.
PAID indicates that the ConfigurationItems in scope for the configuration recorder impact the costs to your bill.
(string) --
integer
The maximum number of results to include in the response.
string
The NextToken string returned on a previous page that you use to get the next page of results in a paginated response.
dict
Response Syntax
{
'ConfigurationRecorderSummaries': [
{
'arn': 'string',
'name': 'string',
'servicePrincipal': 'string',
'recordingScope': 'INTERNAL'|'PAID',
'provider': 'AZURE'
},
],
'NextToken': 'string'
}
Response Structure
(dict) --
ConfigurationRecorderSummaries (list) --
A list of ConfigurationRecorderSummary objects that includes.
(dict) --
A summary of a configuration recorder, including the arn, name, servicePrincipal, recordingScope, and provider.
arn (string) --
The Amazon Resource Name (ARN) of the configuration recorder.
name (string) --
The name of the configuration recorder.
servicePrincipal (string) --
For service-linked configuration recorders, indicates which Amazon Web Services service the configuration recorder is linked to.
recordingScope (string) --
Indicates whether the ConfigurationItems in scope for the configuration recorder are recorded for free ( INTERNAL) or if you are charged a service fee for recording ( PAID).
provider (string) --
For service-linked configuration recorders that record resources from a third-party cloud service provider, indicates the cloud service provider. Currently, AZURE is supported.
NextToken (string) --
The NextToken string returned on a previous page that you use to get the next page of results in a paginated response.
{'ConfigurationRecorder': {'connectorArn': 'string',
'scopeConfiguration': {'allRegions': 'boolean',
'includedRegions': ['string'],
'scopeType': 'string',
'scopeValues': ['string']}}}