app

Gets an individual app resource

Overview

Name	app
Type	Resource
Description	app
Id	awscc.resiliencehub.app

Fields

Name	Datatype	Description
name	string	Name of the app.
description	string	App description.
app_arn	string	Amazon Resource Name (ARN) of the App.
resiliency_policy_arn	string	Amazon Resource Name (ARN) of the Resiliency Policy.
tags	object
app_template_body	string	A string containing full ResilienceHub app template body.
resource_mappings	array	An array of ResourceMapping objects.
app_assessment_schedule	string	Assessment execution schedule.
permission_model	object
event_subscriptions	array	The list of events you would like to subscribe and get notification for.
drift_status	string	Indicates if compliance drifts (deviations) were detected while running an assessment for your application.
region	string	AWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
name,
description,
app_arn,
resiliency_policy_arn,
tags,
app_template_body,
resource_mappings,
app_assessment_schedule,
permission_model,
event_subscriptions,
drift_status
FROM awscc.resiliencehub.app
WHERE data__Identifier = '<AppArn>';

Permissions

To operate on the app resource, the following permissions are required:

Read

resiliencehub:DescribeApp,
resiliencehub:DescribeAppVersionTemplate,
resiliencehub:ListAppVersionResourceMappings,
resiliencehub:ListTagsForResource

Update

cloudformation:DescribeStacks,
cloudformation:ListStackResources,
s3:GetBucketLocation,
s3:GetObject,
s3:ListAllMyBuckets,
autoscaling:DescribeAutoScalingGroups,
apigateway:GET,
ec2:Describe*,
ecs:DescribeServices,
eks:DescribeCluster,
elasticfilesystem:DescribeFileSystems,
elasticloadbalancing:DescribeLoadBalancers,
lambda:GetFunction*,
rds:Describe*,
dynamodb:Describe*,
sqs:GetQueueAttributes,
sns:GetTopicAttributes,
route53:List*,
iam:PassRole,
resiliencehub:*

Delete

resiliencehub:DeleteApp,
resiliencehub:UntagResource,
resiliencehub:ListApps