AWS Config
Explore how AWS Config tracks and records configuration changes of AWS resources, enabling effective governance, compliance auditing, and remediation. Understand key concepts like configuration items, Config rules, remediation actions, and conformance packs to manage AWS resources securely and efficiently.
We'll cover the following...
AWS Config is an AWS service that allows us to monitor, log, evaluate, and remediate any AWS resource-related configuration changes over a period of time. It’s an essential tool to help with auditing and validating compliance of our AWS resources with industry rules and regulations.
Unlike AWS CloudTrail, AWS Config is a per-region service. However, we can still aggregate Config results across all regions and even across AWS accounts within an organization account. With AWS Config, we can track the compliance, configuration, and CloudTrail API calls of supported AWS resources over time.
We can also set up SNS notifications for critical configuration changes using AWS ...