API Reference

1061 resource kinds across 158 AWS services, all under the aws.konfig.io/v1alpha1 API group. Every page is generated from the operator's CRD schemas; every kind has a full-options example in the examples/ directory.

Coverage policy. GA kinds have hand-written controllers. CLOUD CONTROL kinds are generated from the CloudFormation schema registry and reconciled through the AWS Cloud Control API; install them per service bundle from config/crd/cloudcontrol/. ⚠ DESTRUCTIVE SCOPE marks 36 kinds that change account-, region- or organization-wide state (or must carry credential material in their spec). They exist for completeness and should not be used from application namespaces; restrict them with AWSProvider.allowedNamespaces and RBAC.

Deliberately excluded. Billing, Invoicing, Cost and Usage Reports, BCM Data Exports, Budget actions and payment connectors are not generated: automating account finances from a cluster is a liability, not a platform capability. They remain reachable through the generic CloudControlResource.

ACCOUNTACCESS
2 kinds
ACM
6 kinds
ACM PCA
4 kinds
Amazon MQ
2 kinds
Amplify
4 kinds
API Gateway
22 kinds
API Gateway v2
15 kinds
App Runner
5 kinds
AppConfig
10 kinds
AppFlow
3 kinds
Application Auto Scaling
2 kinds
Application Insights
1 kind
Application Signals
3 kinds
AppSync
10 kinds
ARC Zonal Shift
2 kinds
Athena
5 kinds
Audit Manager
2 kinds
Auto Scaling
6 kinds
AWS Config
10 kinds
Backup
10 kinds
Batch
7 kinds
Bedrock
22 kinds
Bedrock AgentCore
23 kinds
Budgets
1 kind
Chatbot
3 kinds
Cloud Control API
1 kind
Cloud Map
4 kinds
CloudFormation
16 kinds
CloudFront
19 kinds
CloudHSM
1 kind
CloudTrail
5 kinds
CloudWatch
8 kinds
CloudWatch Evidently
5 kinds
CloudWatch Logs
16 kinds
CloudWatch OAM
2 kinds
CloudWatch RUM
1 kind
CloudWatch Synthetics
2 kinds
CodeArtifact
3 kinds
CodeBuild
4 kinds
CodeCommit
1 kind
CodeConnections
2 kinds
CodeDeploy
3 kinds
CodeGuru Profiler
1 kind
CodeGuru Reviewer
1 kind
CodePipeline
3 kinds
CodeStar Connections
3 kinds
CodeStar Notifications
1 kind
Cognito
19 kinds
Compute Optimizer
1 kind
Control Tower
3 kinds
Cost Explorer
3 kinds
Data Firehose
1 kind
DataSync
13 kinds
DataZone
17 kinds
DAX
2 kinds
Detective
3 kinds
Direct Connect
7 kinds
DMS
10 kinds
DocumentDB
4 kinds
DynamoDB
4 kinds
EC2 & VPC
112 kinds
EC2 Image Builder
8 kinds
ECR
11 kinds
ECS
10 kinds
EFS
3 kinds
EKS
9 kinds
Elastic Beanstalk
4 kinds
Elastic Load Balancing
7 kinds
ElastiCache
9 kinds
EMR
5 kinds
EMR on EKS
3 kinds
EMR Serverless
1 kind
EventBridge
9 kinds
EventBridge Pipes
1 kind
EventBridge Scheduler
2 kinds
EventBridge Schemas
4 kinds
Fault Injection Service
2 kinds
Firewall Manager
3 kinds
FSx
3 kinds
Global Accelerator
4 kinds
Glue
25 kinds
GuardDuty
11 kinds
IAM
16 kinds
IAM Access Analyzer
2 kinds
IAM Identity Center
6 kinds
IAM Identity Store
3 kinds
IAM Roles Anywhere
3 kinds
Incident Manager
2 kinds
Incident Manager Contacts
4 kinds
Inspector
6 kinds
Inspector Classic
3 kinds
Internet Monitor
1 kind
Keyspaces
3 kinds
Kinesis
3 kinds
KMS
5 kinds
Lake Formation
4 kinds
Lambda
14 kinds
License Manager
3 kinds
Macie
4 kinds
Managed Flink
1 kind
Managed Grafana
1 kind
Managed Prometheus
6 kinds
MemoryDB
6 kinds
MSK
9 kinds
MSK Connect
3 kinds
MWAA
1 kind
Neptune
7 kinds
Network Firewall
6 kinds
Network Flow Monitor
1 kind
Network Manager
16 kinds
Notification Contacts
1 kind
Observability Admin
6 kinds
OpenSearch
3 kinds
OpenSearch Ingestion
1 kind
OpenSearch Serverless
10 kinds
Organizations
6 kinds
RAM
3 kinds
RDS & Aurora
17 kinds
Recycle Bin
1 kind
Redshift
9 kinds
Redshift Serverless
3 kinds
Resilience Hub
2 kinds
Resilience Hub v2
5 kinds
Resource Explorer
3 kinds
Resource Groups
2 kinds
Route 53
7 kinds
Route 53 ARC Control
4 kinds
Route 53 ARC Readiness
4 kinds
Route 53 Profiles
3 kinds
Route 53 Resolver
11 kinds
S3
13 kinds
S3 Control
1 kind
S3 Express
3 kinds
S3 Object Lambda
2 kinds
S3 Tables
5 kinds
SageMaker
40 kinds
Secrets Manager
4 kinds
Security Hub
16 kinds
Security Lake
4 kinds
Service Catalog
16 kinds
SES
2 kinds
SES
19 kinds
Shield
4 kinds
Signer
2 kinds
SNS
3 kinds
SQS
2 kinds
SSM Quick Setup
2 kinds
Step Functions
4 kinds
Storage Gateway
1 kind
STS
1 kind
Systems Manager
12 kinds
Timestream
5 kinds
Transfer Family
9 kinds
User Notifications
7 kinds
Verified Permissions
5 kinds
VPC Lattice
14 kinds
WAFv2
6 kinds
X-Ray
4 kinds