Explanation:
You can use the AWS Config console, AWS CLI, or AWS Config API to view the compliance state of your rules and resources. The describe-compliance-by-resource command of the AWS Config CLI to see the compliance state for each AWS resource of a specific type. This is distinct from the describe-compliance- by-config-rule command, which gives the compliance state of each rule in AWS Config .
Reference: http://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_view-compliance.html