AWS Config VS Amazon EC2 Systems Manager

Periodic Audits and Compliance Checks: Use AWS Config and AWS Security Hub for continuous compliance tracking. Run AWS Inspector on periodic security checks of any identified vulnerabilities and always for mitigation. - Source: dev.to / 27 days ago

AWS has a lot of controls built in, but what if you need more? AWS Config allows you to create your own rules. These rules can then inspect your resources and determine if they are compliant. This is useful when you want to enforce certain configuration settings. Giving you an overview of how compliant your workloads are. - Source: dev.to / 3 months ago

AWS Config is a service that provides a detailed inventory of all of the resources in your AWS account, along with their configuration settings. By using AWS Config, you can easily identify any resources that are not configured correctly, such as those that are not compliant with your security policies. Additionally, AWS Config provides change management capabilities, allowing you to see when changes were made to... Source: about 1 year ago

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. With AWS Config, you can review changes to your resources and maintain an inventory of your AWS resources. - Source: dev.to / over 1 year ago

Once you have enforced the rule to set up MFA through your IdP, make sure to set up an AWS Config rule to ensure that your users have followed through and taken the steps to set it up. You can use one of the pre-built AWS Config MFA-based rules and get alerted via email if a user is non-compliant. - Source: dev.to / over 1 year ago

This "protection" layer of our sensitive value is based on the composition of two AWS services: Key Management Service is the one responsible for creating the private key which will be used to encrypt our value, then Secret Manager or System Manager: Parameters Store allow us to accomplish the same functionality but they differ on some caveats, since the chosen one will be used for saving the secured encrypted... - Source: dev.to / about 1 year ago

AWS Systems Manager is a service that allows you to manage and automate tasks across your AWS resources. One powerful feature of Systems Manager is the ability to set up automated remediation tasks, which can help you quickly resolve issues without manual intervention. For example, you can set up a remediation task that automatically restarts an EC2 instance if its CPU utilization exceeds a certain threshold. Source: about 1 year ago

Instead, it uses an SSM Agent. And this agent will register itself to the AWS Systems Manager. It will use the attached instance profile to do that. From that point on when you request a shell from the Session Manager. The agent will react on this response and establish the connection. - Source: dev.to / over 1 year ago

AWS Systems Manager: you can centralize access to VMs through the service and automate security patching using the tool also. - Source: dev.to / over 1 year ago

You can find more about AWS Systems Manager here. - Source: dev.to / over 2 years ago