All 7 AWS Config questions
More in AWS Config
How do AWS Config rules work to evaluate resource compliance? How can AWS Config automatically remediate non compliant resources once they are detected? What is a Config conformance pack, and how does it simplify compliance management at scale? How does the AWS Config configuration timeline help with troubleshooting and root cause analysis? How does AWS Config aggregator support monitoring compliance across multiple AWS accounts and regions from a single place? How can custom Config rules built with Lambda functions evaluate complex, organization specific compliance requirements that AWS managed rules do not cover?
Advertisement
Back to results for “AWS Security Hub & GuardDuty”
AWS › AWS Config

What is AWS Config and what problem does it help solve?

Beginner

Answer

AWS Config is a service that continuously records the configuration state of your AWS resources over time and evaluates them against rules you define, letting you answer questions like what did this resource's configuration look like last week, or is this resource currently compliant with our security policies, without needing to manually track configuration changes yourself.
aws configservice put-configuration-recorder --configuration-recorder name=default,roleARN=arn:aws:iam::123456789012:role/ConfigRole
Real-world example A security team uses AWS Config to detect the exact moment a security group was accidentally modified to allow public internet access, along with a clear before and after view of the configuration change.

Common follow-ups: What is the difference between AWS Config and CloudTrail?;How much historical configuration data does AWS Config retain?

AWS CloudTrail & Auditing;AWS Security Hub & GuardDuty
All 7 AWS Config questions