Management and Governance
AWS Config
A service that records supported resource configurations, evaluates them against rules, and shows configuration history.
Key points
- Config can show how a resource configuration changed over time.
- Rules evaluate configuration against desired conditions.
- Config complements activity logs but does not replace CloudTrail.
Best-known use cases
- Find when a security group configuration changed.
- Evaluate whether resources conform to configuration rules.
What candidates often confuse it with
- Config focuses on resource state and compliance; CloudTrail focuses on API activity.
- CloudWatch focuses on operational behavior such as metrics, logs, and alarms.
Key Cloud Practitioner takeaway
Use Config for configuration history and rule evaluation.
Related services
- AWS CloudTrail
- Amazon CloudWatch
Relevant exam tasks
- D2.2