AWS Config | Getting Started Flashcards
How does AWS Config work with AWS CloudTrail?
Getting Started
AWS Config | Management Tools
AWS CloudTrail records user API activity on your account and allows you to access information about this activity. You get full details about API actions, such as identity of the caller, the time of the API call, the request parameters, and the response elements returned by the AWS service. AWS Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs). You can use a CI to answer “What did my AWS resource look like?” at a point in time. You can use AWS CloudTrail to answer “Who made an API call to modify this resource?” For example, you can use the AWS Management Console for AWS Config to detect security group “Production-DB” was incorrectly configured in the past. Using the integrated AWS CloudTrail information, you can pinpoint which user misconfigured “Production-DB” security group.
How do I get started with this service?
Getting Started
AWS Config | Management Tools
The quickest way to get started with AWS Config is to use the AWS Management Console. You can turn on AWS Config in a few clicks. For additional details, see the Getting Started documentation.
How do I access my resources’ configuration?
Getting Started
AWS Config | Management Tools
You can lookup current and historical resource configuration using the AWS Management Console, AWS Command Line Interface or SDKs.
For additional details, please refer to AWS Config documentation.
Do I turn on AWS Config regionally or globally?
Getting Started
AWS Config | Management Tools
You turn on AWS Config on a per-region basis for your account.
Can AWS Config aggregate data across different AWS accounts?
Getting Started
AWS Config | Management Tools
Yes, you can set up AWS Config to deliver configuration updates from different accounts to one S3 bucket, once the appropriate IAM policies are applied to the S3 bucket. You can also publish notifications to the one SNS Topic, within the same region, once appropriate IAM policies are applied to the SNS Topic.
Is API activity on AWS Config itself logged by AWS CloudTrail?
Getting Started
AWS Config | Management Tools
Yes. All AWS Config API activity, including use of AWS Config APIs to read configuration data, is logged by AWS CloudTrail.
