AWS Config Reviews and details

Social recommendations and mentions

• How to Master Multi Region Architectures in AWS

  Periodic Audits and Compliance Checks: Use AWS Config and AWS Security Hub for continuous compliance tracking. Run AWS Inspector on periodic security checks of any identified vulnerabilities and always for mitigation. - Source: dev.to / 19 days ago

• Use custom rules to validate your compliance

  AWS has a lot of controls built in, but what if you need more? AWS Config allows you to create your own rules. These rules can then inspect your resources and determine if they are compliant. This is useful when you want to enforce certain configuration settings. Giving you an overview of how compliant your workloads are. - Source: dev.to / 3 months ago

• 6 Best Practices for AWS Monitoring

  AWS Config is a service that provides a detailed inventory of all of the resources in your AWS account, along with their configuration settings. By using AWS Config, you can easily identify any resources that are not configured correctly, such as those that are not compliant with your security policies. Additionally, AWS Config provides change management capabilities, allowing you to see when changes were made to... Source: about 1 year ago

• The DevOps Guide to AWS Security Tools

  AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. With AWS Config, you can review changes to your resources and maintain an inventory of your AWS resources. - Source: dev.to / about 1 year ago

• Uncomplicating cloud security — IAM (Part 2)

  Once you have enforced the rule to set up MFA through your IdP, make sure to set up an AWS Config rule to ensure that your users have followed through and taken the steps to set it up. You can use one of the pre-built AWS Config MFA-based rules and get alerted via email if a user is non-compliant. - Source: dev.to / over 1 year ago

• Uncomplicating cloud Security — Foundations (Part 1)

  AWS Config: a service that can alert you if specific rules are broken. - Source: dev.to / over 1 year ago

• Managing AWS at scale; multi-account strategy

  On top of this, AWS has several tools aimed toward centralized observability and security, which all support and promote multi-account strategies such as AWS Security Hub, AWS Config and AWS GuardDuty. - Source: dev.to / over 1 year ago

• How I cleared AWS-Certified SAP on AWS Speciality Exam

  AWS Services specially Governance tools like AWS Config, and AWS Cloudwatch Events, and their impact on SAP systems are evaluated. AWS Associate Certification (SAA-C03) learning path gives you roughly 50% of the knowledge needed. - Source: dev.to / over 1 year ago

• AWS Security is very complicated... or very simple - it's all how you architect it!

  In AWS, your best friend is AWS Config - you can use a sets of AWS defined or custom rules to ensure your resources comply with best practices. Depending on your setting, AWS Config can inform you about non-compliance event and do nothing, but also with the help of Lambda Function it can automatically remediate non-compliant resources. AWS Security Hub can continuously monitor your security posture and send... - Source: dev.to / almost 2 years ago

• Automated Enterprise Deployment of AWS Config

  Seasoned users of AWS will be familiar with the AWS Config service. Config is a powerful tool that lets you continuously monitor and record the configuration of AWS resources in your account. Using Config, you can easily see changes to configuration of a given AWS resource on a timeline, see who made a given configuration change, and see relationships between resources in your account. Config also offers a... - Source: dev.to / about 2 years ago

• Event-Driven serverless architecture to automatically remediate security findings

  AWS Config — This service enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. - Source: dev.to / about 2 years ago

• AWS Inspector and AWS Config - step by step towards more security

  For the latter, AWS Config enables you to assess, audit and evaluate the configurations of your AWS resources. In the case described here, it is the Security Group which controls the access to the example bastion host. When AWS Config checks are done, any changes which violate the rules will be forwarded to an SNS topic. This provides the chance to react very quickly to changes done. AWS Config Pricing is based on... - Source: dev.to / about 2 years ago

• Implementing Cloud Governance as a Code using Cloud Custodian

  AWS config records and monitors all configuration data of AWS resources and We can build rules to help us enforce compliance. Setting up a Multi account and Multi Zone option is available. It also provides some predefined AWS managed rule that we can use or we can write our own custom rules. We can also take remediation action based on matches. For Custom policy we need to write our own lambda function for taking... - Source: dev.to / over 2 years ago

• What is "Config" in AWS Cost calculator?

  It's the literal product called "aws config" https://aws.amazon.com/config/. Source: over 2 years ago

• Cloud Configuration Management Tool suggestions

  If you mean tools that make it easier to build, deploy and maintain the cloud, there are a few flavors: - aws config - bluearch - qovery. Source: over 2 years ago

• Do you version control Cloud?

  AWS Config, which is a cloud resource configuration management service by AWS itself. The AWS service works on the notion of recorder, which needs to be configured to record (snapshot) the cloud resources. The recorder can be configured to include all cloud resources or selective few. The resource properties are also recorded. These recorded configuration snapshots then can be stored as long as 7 years (which is... - Source: dev.to / almost 3 years ago

• IAM Policies: Good, Bad, Ugly

  The Bad: Unscoped Service Actions. By far the most common form of broad permissions occurs when policies are scoped to a service but not to specific actions. AWS CloudFormation samples: the "AWS Config delivery channel and rules" template. See the audit here. Source: about 3 years ago