AWS Cloud Operations & Migrations Blog

Tag: AWS Config

Cost Optimization recommendations for AWS Config

In this post, we’ll walk you through the various best practices and recommendations for optimizing AWS Config costs. This also provides technical guidance for looking at the rules and the recorder, how to start deleting or removing rules that aren’t needed, and then editing the Settings of Config, specifically the “Resource types to record”, to […]

How to use AWS Config and CloudTrail to find who made changes to a resource

AWS Config is a service that continuously tracks and evaluates the configuration changes of your AWS resources. It provides you with a Resource Timeline which helps you to investigate and audit how the resources and their relationships change over time. AWS Config records the configuration of supported resources in a JSON structure known as a […]

How to get a daily report for your resources configuration changes

AWS allows customers to build, experience, and innovate in their AWS accounts, resulting in dynamic environments. You can manage your resources changes using different controls, such as: Preventive controls with AWS Identity and Access Management (IAM) policies Detective controls with AWS Config Rules Preventive and Detective controls with continuous integration and continuous delivery (CI/CD) pipelines […]

Prepare for an Audit in AWS Part 2 – General Best Practices

In Part 1 of this blog series, I discussed how you can use purpose-built services, such as AWS Audit Manager, AWS Config, and AWS Artifact, to help with almost any audit that you may be preparing for, with features geared specifically to what is required by an audit. But the story shouldn’t start there. Instead, […]

Prepare for an Audit in AWS Part 1 – AWS Audit Manager, AWS Config, and AWS Artifact

AWS customers represent a range of different verticals, locations, and sizes. Given today’s digital, global economy, customers have various governance needs based upon their geographies. Regardless of the regulations or standards, AWS provides services and resources that help our customers prepare to meet those requirements. In this post, I demonstrate how you can use AWS […]

How Kyndryl used AWS Service Management Connector, AWS Config and AWS Systems Manager to achieve lifecycle management of AWS resources through ServiceNow

Customers need a way to do lifecycle management of AWS resources in the AWS Cloud. Many customers leverage managed solutions providers to manage their AWS accounts, and they’re looking for AWS native solutions and integrations to solve their business problems. Lifecycle management includes discovering new resources from customer’s AWS environment, populating them via federation into […]

AWS Resources Lifecycle Management Via ServiceNow and AWS Service Management Connector

Customers deploy series of AWS resources to support their workloads in the cloud. These organizations, as part of their maturity journey, must help managing the lifecycle of their AWS Resources using existing IT Service Management tool, such as ServiceNow. Manually executing these tasks via both consoles (ServiceNow and AWS Console) is inefficient and time-tasking. With […]

Find the most evaluated AWS Config rules using AWS CloudTrail Lake

In this post, I’ll show you how to find most evaluated AWS Config rules to dive deep into AWS Config charges on your invoice by using AWS CloudTrail Lake. The solution uses the new AWS CloudTrail feature, CloudTrail Lake, to analyze CloudTrail events. AWS Config is a service that enables you to assess, audit, and […]

Customize AWS Config resource tracking in AWS Control Tower environment

[Update on July/26/2023] AWS Config recorder has recently provided support for excluding resource types from configuration change tracking, prior to this change all resource types needed to be explicitly listed. This blog has been updated to incorporate that change and make it easier to operationally manage. Some of our largest customers use AWS Control Tower […]

Compliance and Auditing Sessions at AWS re:Inforce 2022

Today we’re going to highlight just some of the sessions planned for AWS re:Inforce 2022, which will take place in Boston, MA, on July 26-27. AWS re:Inforce is a learning conference focused on security, compliance, identity, and privacy. The event features access to hundreds of technical and business sessions, an AWS Partner expo hall, a […]