Updated on 2024-05-16 GMT+08:00

Viewing Organization Conformance Packages

Scenario

An organization administrator or a delegated administrator of Config can only view organization conformance packages created by themselves.

Each member can view organization packages that are deployed to their accounts in the conformance package list. If you create an organization conformance package using an account, you can only use the same account to delete the package. Members can only initiate resource evaluation and view evaluation results.

This section mainly contains Viewing Organization Conformance Packages (for Administrators) and Viewing Organization Conformance Packages (for Organization Members).

Viewing Organization Conformance Packages (for Administrators)

  1. Sign in to the management console as an organization administrator or a delegated administrator of Config.
  2. Click in the upper left corner. Under Management & Governance, click Config.
  3. On the left navigation pane, choose Conformance Package.
  4. Select the Organization Conformance Package tab to view all created organization conformance packages and their deployment statuses.
  5. Click the name of a target organization conformance package to view details.

    On the left, view deployed and excluded member accounts. On the right, view package details.

    Figure 1 Organization conformance package details

    The deployment status of an organization conformance package may be:

    • Deployed: A conformance package has been deployed.
    • Deploying: A conformance package is being deployed.
    • Abnormal: Conformance package deployment failed.
    • Rolled back: Some rules in a conformance package failed to be created and were rolled back, and other created rules were deleted.
    • Rolling back: Some rules in a conformance package failed to be created and were rolled back, and other created rules were being deleted.
    • Rollback failed: Some rules in a conformance package failed to be created and to be rolled back. You can access RFS to check out the reasons.
    • Deleting: Rules in a conformance package and the package are being deleted.
    • Exception: Deleting a conformance package failed.
    • Updated: A compliance package is updated.
    • Updating: A compliance package is being updated.
    • Updating: A compliance package update is in progress.

Viewing Organization Conformance Packages (for Organization Members)

  1. Sign in to the management console as an organization member.
  2. Click in the upper left corner. Under Management & Governance, click Config.
  3. On the left navigation pane, choose Conformance Package.
  4. On the Conformance Packages tab, click the name of a target organization conformance package in the list to view details.

    On the details page, view package basic information, parameters, and evaluation result of each rule.

    Locate a target rule and click the rule name to go to the details page. Non-compliant resources evaluated against the rule are displayed by default.

    Figure 2 Viewing organization conformance packages (for organization members)

    Organization conformance packages will be displayed with the Org field added before each package name in the package list of each deployed member account.

    Members can only trigger rules in an organization conformance package and view the evaluation results. They cannot delete an organization conformance package.