get_configuration_history
Retrieve an AWS resource's configuration-change history with field-level diffs, showing what changed and when. Uses AWS Config data to identify related resources for impact analysis.
Instructions
Get the configuration-change history for one AWS resource, with field-level diffs.
Answers "what actually changed on this resource, and when". CloudTrail records that an API call happened; AWS Config records the resulting state, so this is what tells you a security group's ingress rules went from one value to another.
Each change carries a capture time and a config_item_id for citation, plus the resources AWS Config considers related — useful for establishing whether a changed resource is actually connected to a failing one.
Requires AWS Config to be enabled and config:GetResourceConfigHistory.
Args: resource_type: AWS Config resource type, e.g. 'AWS::EC2::SecurityGroup' resource_id: Resource ID, e.g. 'sg-0123456789abcdef0' timeframe_hours: How far back to look (1-720) limit: Maximum configuration snapshots to retrieve (1-100)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| resource_id | Yes | ||
| resource_type | Yes | ||
| timeframe_hours | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |