AWS Config

Evaluate the configuration settings of AWS resources.
Create AWS Config rules, representing ideal configuration settings.
AWS Config provides
- customizable,
- predefined rules called managed rules
- Can also create own custom rules.
AWS Config continuously tracks the configuration changes that occur among resources
If a resource violates a rule, AWS Config flags the resource and the rule as noncompliant.
Config console shows the compliance status of rules and resources.
See how AWS resources comply overall with desired configurations
Can also use following to make requests to the AWS Config service for compliance information
- AWS CLI
- the AWS Config API
- AWS SDKs.