AWS Config

Question 1

AWS Config

Answer 1

A Regional service that identifies anomalies in an Account configuration against desired, recommended settings or Compliance

Question 2

Config Actions against non compliant changes

Answer 2

Config does not prevent changes from happening

Question 3

Config Integrations

Answer 3

Config generates its data from Cloudtrail and Cloudwatch.

AWS Config is compatible with Events Bridge, Lambda, SNS etc

Question 4

Config Repository

Answer 4

S3

Question 5

Config Rule

Answer 5

uses Lambda to evaluate config items over set rules. The config items are measured to be either Compliant or **Non-Compliant

Question 6

Config Features

Answer 6

This rule results can be sent to targets to perform certain Remediation(Fix the problem Automatically)

Lambda can be effective in remediating Account related configurations

While

SSM(Systems Manager) can be more effective for Instance configuration