Architecture note2 lab guides2 lab guides
Config · AWS Config
Configuration history, Config rules, compliance timelines, remediation, conformance packs, and inventory queries.
Outcome
- Created a Config delivery bucket with the required service policy
- Created an SNS topic for change notifications
- Scoped the recorder to the resource types used in the lab
- Started the recorder and verified that it is running
- Created a resource change and inspected the configuration item
- Enabled managed rules for S3 encryption, S3 versioning, and unrestricted SSH
- Created and fixed non-compliant S3 and security group resources
- Reviewed the compliance timeline
- Forced rule evaluation with
start-config-rules-evaluation - Built a custom Lambda-backed rule for required tags
- Handled deleted resources as
NOT_APPLICABLE - Configured SSM auto-remediation
- Tested the full remediation cycle
- Ran Config advanced queries
- Deployed a conformance pack
- Cleaned up resources in dependency order