AWS Config VS AWS Control Tower

Periodic Audits and Compliance Checks: Use AWS Config and AWS Security Hub for continuous compliance tracking. Run AWS Inspector on periodic security checks of any identified vulnerabilities and always for mitigation. - Source: dev.to / 26 days ago

AWS has a lot of controls built in, but what if you need more? AWS Config allows you to create your own rules. These rules can then inspect your resources and determine if they are compliant. This is useful when you want to enforce certain configuration settings. Giving you an overview of how compliant your workloads are. - Source: dev.to / 3 months ago

AWS Config is a service that provides a detailed inventory of all of the resources in your AWS account, along with their configuration settings. By using AWS Config, you can easily identify any resources that are not configured correctly, such as those that are not compliant with your security policies. Additionally, AWS Config provides change management capabilities, allowing you to see when changes were made to... Source: about 1 year ago

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. With AWS Config, you can review changes to your resources and maintain an inventory of your AWS resources. - Source: dev.to / about 1 year ago

Once you have enforced the rule to set up MFA through your IdP, make sure to set up an AWS Config rule to ensure that your users have followed through and taken the steps to set it up. You can use one of the pre-built AWS Config MFA-based rules and get alerted via email if a user is non-compliant. - Source: dev.to / over 1 year ago

I think it’s been superseded by Control Tower, right? Landing Zones solutions refer to the days when there wasn’t an actual service that did account vending and policy. Https://aws.amazon.com/controltower/. Source: 6 months ago

Amazon CloudTrail is the surveillance camera for our accounts. It records every API call that any users or roles make. If we have multiple accounts set up in AWS Organizations, we can create a central trail in the management account. We can then enable logging to all accounts and all regions. Or, if we use Control Tower to set up the account structure, we don't need to do anything because it will automatically... - Source: dev.to / 9 months ago

Deploy our application to sandbox, test, and production environments in a multi-account AWS organization managed by Control Tower. - Source: dev.to / 10 months ago

Build your own… In this post I am focussing on ADF. The benefit of ADF over AWS Control Tower is that you have more control over the framework. All resources run in your accounts and are under your control. AWS Control Tower is a managed service by AWS. Giving less flexibility but remove maintenance burden. - Source: dev.to / over 1 year ago

Https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome. - Source: Hacker News / over 1 year ago