Skip to content

Conversation

@petabook
Copy link

Feature: Support for AWS Config Resource Type Exclusions

Added support for excluding specific AWS resource types from AWS Config recording.
Users can now specify a list of resource types to exclude using the new variable
exclusion_by_resource_types.

Example

exclusion_by_resource_types = [
  "AWS::Config::ResourceCompliance",
  "AWS::CloudWatch::Alarm"
]

Changes

  • Added variable exclusion_by_resource_types.
  • Default value: null - preserves previous behavior.
  • Added dynamic blocks to the aws_config_configuration_recorder resource. These blocks are evaluated only when exclusion_by_resource_types is not null and not empty.
  • The fields all_supported and include_global_resource_types become false if a proper exclusion_by_resource_types is provided.

@petabook petabook marked this pull request as draft October 13, 2025 01:55
@petabook petabook marked this pull request as ready for review October 13, 2025 23:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

triage Needs triage

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant