• It provides a detailed view of the resources associated with your AWS account,
  • It includes
    • how resources are configured
    • how they are related to one another
    •  how the configurations and their relationships have changed over time
  • It continuously monitors and records your AWS resource configurations
  • You can automate the evaluation of recorded configurations against desired configurations.

Using AWS Config

  • Evaluate the configuration settings of AWS resources.
  • Create AWS Config rules, representing ideal configuration settings.
  • AWS Config provides
    • customizable,
    • predefined rules called managed rules
    • Can also create own custom rules.
  • AWS Config continuously tracks the configuration changes that occur among resources
  • If a resource violates a rule, AWS Config flags the resource and the rule as noncompliant.
  • Config console shows the compliance status of rules and resources.
  • See how AWS resources comply overall with desired configurations
  • Can also use following to make requests to the AWS Config service for compliance information
    • AWS CLI
    • the AWS Config API
    • AWS SDKs.
Menu