Awsconfig

Basics

• AWS Config monitors an accunt & records configuration changes on resources
• AWS Config can be used for auditing and standards compliance
• It does not take preventive actions even if there is drift
• It is a regional service by default but can be configured to support cross region and cross account reporting
• SNS notifications are triggered whenever changes are registered.
• Product stores all the configuration history in an S3 bucket
• Config Rules can be defined which evaluate resources against a standard. Lambdas are used for this evaluation