Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Skip to main content

AWS Config

Assess, audit, and evaluate configurations of your resources

Create an AWS account

Why AWS Config?

Learn more about AWS Config. AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources.

Benefits of AWS Config

Continually assess, monitor, and record resource configuration changes to simplify change management.
Audit and evaluate compliance of your resource configurations with your organization’s policies on a continual basis.
Simplify operational troubleshooting by correlating configuration changes to particular events in your account.

Use cases

Discover resources that exist in your account or publish the configuration data of third-party resources into AWS Config, record their configurations, and capture any changes to quickly troubleshoot operational issues.

Learn more about configuration recording best practices

Codify your compliance requirements as AWS Config rules and author remediation actions, automating the assessment of your resource configurations across your organization.

Learn more about compliance as code

Evaluate resource configurations for potential vulnerabilities, and review your configuration history after potential incidents to examine your security posture.

Learn more about vulnerability assessments