Continuous Monitoring
AWS Config provides continuous monitoring of AWS resources, allowing users to track changes and ensure resources remain compliant with company policies and regulations.
Resource Inventory
It maintains a comprehensive inventory of resources, providing detailed historical and current configuration information to help manage AWS resources effectively.
Security and Compliance
AWS Config enables security and compliance auditing by recording and evaluating configurations against desired settings and standards, facilitating swift remediation of non-compliant resources.
Integration with AWS Services
Easily integrates with other AWS services such as AWS Lambda, AWS CloudTrail, and AWS Identity and Access Management (IAM) to enhance monitoring, automation, and security.
Automated Evaluation
AWS Config Rules can be used to automatically evaluate AWS resource configurations, ensuring they meet specific compliance requirements and taking corrective actions if needed.
Ref: What is AWS config Credits to aws for the cover page image I used. - Source: dev.to / about 1 month ago
Ii) AWS Config must be enabled in all member accounts (Firewall Manager relies on AWS Config for resource visibility). - Source: dev.to / about 1 month ago
Cloud providers offer services to detect, manage, and remediate configuration drift in their environments. Because cloud environments often become large and complex, services such as AWS Config, Azure Policy, and Workload Manager Evaluation can help continuously monitor and evaluate cloud resources and their configurations according to rules. - Source: dev.to / 5 months ago
Regularly audit and monitor your S3 bucket configurations: Establish a routine for auditing and monitoring your S3 bucket configurations. You can also set up alerts for any changes to permissions or policies, enabling timely detection and response to potential security incidents. Additionally, you can utilize tools and services such as AWS Config, which helps you assess, audit, and evaluate the configuration of... - Source: dev.to / 9 months ago
Periodic Audits and Compliance Checks: Use AWS Config and AWS Security Hub for continuous compliance tracking. Run AWS Inspector on periodic security checks of any identified vulnerabilities and always for mitigation. - Source: dev.to / about 1 year ago
AWS has a lot of controls built in, but what if you need more? AWS Config allows you to create your own rules. These rules can then inspect your resources and determine if they are compliant. This is useful when you want to enforce certain configuration settings. Giving you an overview of how compliant your workloads are. - Source: dev.to / about 1 year ago
AWS Config is a service that provides a detailed inventory of all of the resources in your AWS account, along with their configuration settings. By using AWS Config, you can easily identify any resources that are not configured correctly, such as those that are not compliant with your security policies. Additionally, AWS Config provides change management capabilities, allowing you to see when changes were made to... Source: about 2 years ago
AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. With AWS Config, you can review changes to your resources and maintain an inventory of your AWS resources. - Source: dev.to / about 2 years ago
Once you have enforced the rule to set up MFA through your IdP, make sure to set up an AWS Config rule to ensure that your users have followed through and taken the steps to set it up. You can use one of the pre-built AWS Config MFA-based rules and get alerted via email if a user is non-compliant. - Source: dev.to / over 2 years ago
AWS Config: a service that can alert you if specific rules are broken. - Source: dev.to / over 2 years ago
On top of this, AWS has several tools aimed toward centralized observability and security, which all support and promote multi-account strategies such as AWS Security Hub, AWS Config and AWS GuardDuty. - Source: dev.to / over 2 years ago
AWS Services specially Governance tools like AWS Config, and AWS Cloudwatch Events, and their impact on SAP systems are evaluated. AWS Associate Certification (SAA-C03) learning path gives you roughly 50% of the knowledge needed. - Source: dev.to / over 2 years ago
In AWS, your best friend is AWS Config - you can use a sets of AWS defined or custom rules to ensure your resources comply with best practices. Depending on your setting, AWS Config can inform you about non-compliance event and do nothing, but also with the help of Lambda Function it can automatically remediate non-compliant resources. AWS Security Hub can continuously monitor your security posture and send... - Source: dev.to / almost 3 years ago
Seasoned users of AWS will be familiar with the AWS Config service. Config is a powerful tool that lets you continuously monitor and record the configuration of AWS resources in your account. Using Config, you can easily see changes to configuration of a given AWS resource on a timeline, see who made a given configuration change, and see relationships between resources in your account. Config also offers a... - Source: dev.to / about 3 years ago
AWS Config — This service enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. - Source: dev.to / about 3 years ago
For the latter, AWS Config enables you to assess, audit and evaluate the configurations of your AWS resources. In the case described here, it is the Security Group which controls the access to the example bastion host. When AWS Config checks are done, any changes which violate the rules will be forwarded to an SNS topic. This provides the chance to react very quickly to changes done. AWS Config Pricing is based on... - Source: dev.to / about 3 years ago
AWS config records and monitors all configuration data of AWS resources and We can build rules to help us enforce compliance. Setting up a Multi account and Multi Zone option is available. It also provides some predefined AWS managed rule that we can use or we can write our own custom rules. We can also take remediation action based on matches. For Custom policy we need to write our own lambda function for taking... - Source: dev.to / over 3 years ago
It's the literal product called "aws config" https://aws.amazon.com/config/. Source: over 3 years ago
If you mean tools that make it easier to build, deploy and maintain the cloud, there are a few flavors: - aws config - bluearch - qovery. Source: over 3 years ago
AWS Config, which is a cloud resource configuration management service by AWS itself. The AWS service works on the notion of recorder, which needs to be configured to record (snapshot) the cloud resources. The recorder can be configured to include all cloud resources or selective few. The resource properties are also recorded. These recorded configuration snapshots then can be stored as long as 7 years (which is... - Source: dev.to / almost 4 years ago
The Bad: Unscoped Service Actions. By far the most common form of broad permissions occurs when policies are scoped to a service but not to specific actions. AWS CloudFormation samples: the "AWS Config delivery channel and rules" template. See the audit here. Source: about 4 years ago
Do you know an article comparing AWS Config to other products?
Suggest a link to a post with product alternatives.
This is an informative page about AWS Config. You can review and discuss the product here. The primary details have not been verified within the last quarter, and they might be outdated. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.