AWS Config
It provides a detailed view of the resources associated with your AWS account,
- It includes
- how resources are configured
- how they are related to one another
- how the configurations and their relationships have changed over time
- It continuously monitors and records your AWS resource configurations
- You can automate the evaluation of recorded configurations against desired configurations.
- Evaluate the configuration settings of AWS resources.
- Create AWS Config rules, representing ideal configuration settings.
- AWS Config provides
- customizable,
- predefined rules called managed rules
- Can also create own custom rules.
- AWS Config continuously tracks the configuration changes that occur among resources
- If a resource violates a rule, AWS Config flags the resource and the rule as noncompliant.
- Config console shows the compliance status of rules and resources.
- See how AWS resources comply overall with desired configurations
- Can also use following to make requests to the AWS Config service for compliance information
- AWS CLI
- the AWS Config API
- AWS SDKs.