AWS Config
Explore the capabilities of AWS Config to monitor and log configuration changes in AWS resources. Learn to track compliance, set up remediation actions, and use conformance packs for managing security and auditing across regions and accounts.
We'll cover the following...
AWS Config is an AWS service that allows us to monitor, log, evaluate, and remediate any AWS resource-related configuration changes over a period of time. It’s an essential tool to help with auditing and validating compliance of our AWS resources with industry rules and regulations.
Unlike AWS CloudTrail, AWS Config is a per-region service. However, we can still aggregate Config results across all regions and even across AWS accounts within an organization account. With AWS Config, we can track the compliance, configuration, and CloudTrail API calls of supported AWS resources over time.
We can also set up SNS notifications for critical configuration changes using AWS EventBridge ...