AWS Config ¶
You can use AWS Config rules to represent your desired configuration settings for specific AWS resources or for an entire AWS account. If a resource violates a rule, AWS Config flags the resource and the rule as noncompliant and notifies you through Amazon SNS
AWS Config also provides the following features:
- A normalized snapshot of how your resources are configured and the ability to create rules that enforce the compliant state of those resources
- Customizable, predefined rules to help you get started, in addition to prebuilt remediation actions and the option to automatically remediate an issue