Config

Question 1

What service does AWS Config provide?

Answer 1

Config records configuration changes over time on resources. It is useful for auditing of changes and standards compliance.

Question 2

How does AWS Config prevent non-compliant changes from occuring?

Answer 2

It doesn’t. It only records that the change occurred. It can then be used with other services to notify that a bad change has happened.

Question 3

What type of service is AWS Config?

Answer 3

It is a regional service and monitors resources within a Region. It can support cross-region monitoring and account aggregation.

Question 4

Where does AWS Config store change data?

Answer 4

In an S3 bucket.

Question 5

How can you implement automatic remediation of compliance issues with AWS Config?

Answer 5

By notifying EventBridge of a non-compliant change. EventBridge can notify other resources (like Lambda) which can correct the non-compliance.