Articles → AWS → AWS Config

AWS Config

Purpose

1. Configuration based → This type of trigger runs the evaluation when a resource is created, changed, or deleted. For example, s3-bucket-replication-enabled (Checks if the replication is enabled for S3 bucket or not)
2. Periodic → This type of trigger runs the evaluation on a certain interval of time. For example, ec2-stopped-instance (Checks if the ec2 is stopped more than allowed number of times)

Steps

1. Create a S3 bucket
2. Create a new role
3. Create a rule
4. Reevaluate rules
5. Remediation
6. Output

Create A S3 Bucket

Create A New Role

Create A Rule

Reevaluate Rules

Remediation

Output