5 minutes
Introduction
- Helps with auditing & compliance of our AWS Resources
- Helps record config and changes over time.
- Possiblity of storing the configuration data into S3 (analyzed by Athena)
- You can recieve alerts (SNS Notification) for any changes
- AWS Config is a per-region services- Can be aggregated across region and account.
Problems/Questions solved by AWS Config
- Is there un-restricted SSH access to my security group?
- Do my bucket have any public access.
- How has my ALB configuration changed over time.