zoom_in Click to enlarge

AWS Config

▲ ▼

language

description AWS Config Overview

AWS Config provides continuous monitoring and assessment of your Amazon Web Services (AWS) resource configurations. It allows organizations to track changes, ensure compliance with internal policies or industry standards, and verify critical settings like security groups and instance types. This service is valuable for IT professionals managing AWS environments, DevOps teams seeking operational visibility, and anyone needing automated configuration governance and reporting.

help AWS Config FAQ

Does AWS Config automatically prevent my team from making unauthorized changes to infrastructure?

No, AWS Config is strictly a monitoring and evaluation tool that records the configuration history of your AWS resources; it does not block actions. To actively prevent changes, you must use AWS IAM policies or AWS Service Control Policies (SCPs) in AWS Organizations.

What AWS service uses Config rules to automatically remediate compliance violations?

AWS Systems Manager can be configured with AWS Config to automatically remediate non-compliant resources. For example, if a Config rule detects a publicly exposed S3 bucket, Systems Manager Automation can instantly make it private without human intervention.

Can AWS Config track configuration changes for resources running on-premises?

Yes, by utilizing the AWS Config aggregator feature, you can record data from on-premises servers. This requires installing the AWS Systems Manager (SSM) Agent on your local machines so they can report their configuration states to the AWS cloud.

swap_horiz

Looking for AWS Config alternatives? Compare top competitors ranked & scored

arrow_forward