AWS Config is the service that enables Kenneth to assess, audit, and evaluate the configurations of AWS resources.
* AWS Config: This service provides a detailed view of the configuration of AWS resources within the account. It includes a history of configuration changes and relationships between AWS resources, making it possible to review changes and determine overall compliance against internal guidelines1.
* Capabilities of AWS Config:
* Configuration and Relationship Review: AWS Config records and evaluates the configurations and relationships of AWS resources, allowing Kenneth to track changes and review the environment's compliance status.
* Resource Configuration History: It maintains a detailed history of the configurations of AWS
* resources over time.
* Compliance Evaluation: AWS Config can assess resource configurations against desired configurations to ensure compliance with internal guidelines.
* Why Not the Others?:
* AWS CloudTrail: This service is focused on providing event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
* AWS CloudFormation: While CloudFormation is used for creating and managing a collection of related AWS resources, it does not provide configuration history or compliance evaluation.
* AWS Security Hub: Security Hub gives a comprehensive view of high-priority security alerts and compliance status across AWS accounts, but it does not offer detailed configuration history or relationship tracking.
References:
* AWS Config: Assess, audit, and evaluate configurations of your resources1.