AWS Config

Learn how AWS Config allows us to monitor, evaluate, and remediate any AWS resource configuration changes.

AWS Config is an AWS service that allows us to monitor, log, evaluate, and remediate any AWS resource-related configuration changes over a period of time. It’s an essential tool to help with auditing and validating compliance of our AWS resources with industry rules and regulations.

Press + to interact

Unlike AWS CloudTrail, AWS Config is a per-region service. However, we can still aggregate Config results across all regions and even across AWS accounts within an organization account. With AWS Config, we can track the compliance, configuration, and CloudTrail API calls of supported AWS resources over time.

We can also set up SNS notifications for critical configuration changes using AWS ...