Why did the DeliveryFrequency of my AWS Config configuration snapshot change?

Last updated: 2020-12-14

The deliveryFrequency of my AWS Config configuration snapshot changed, and there are PutDeliveryChannel events logged in AWS CloudTrail. However, I didn't change the AWS Config delivery channel. What caused this change?

Resolution

The frequency that AWS Config delivers configuration snapshots is controlled by:

Note: If you receive errors when running AWS CLI commands, make sure that you’re using the most recent version of the AWS CLI.

You might see PutDeliveryChannel events logged in CloudTrail if:

  • The deliveryFrequency parameter isn't configured for the delivery channel.
  • The value of the MaximumExecutionFrequency parameter is less than the deliveryFrequency value set on the delivery channel.

If no value for the deliveryFrequency is set, then AWS Config calls the PutDeliveryChannel API to update the MaximumExecutionFrequency value for the periodic rule.

You can view the deliveryFrequency using the DescribeDeliveryChannnels command similar to the following:

$ aws configservice describe-delivery-channels --region your-region

{
    "DeliveryChannels": [
        {
            "configSnapshotDeliveryProperties": {
                "deliveryFrequency": "Twelve_Hours"
            }, 
            "name": "default", 
            "s3BucketName": "config-bucket-123456789012-your-region"
        }
    ]
}

You can view the PutDeliveryChannel API using AWS CloudTrail similar to the following:

"eventSource": "config.amazonaws.com",
    "eventName": "PutDeliveryChannel",
    "awsRegion": "your-region",
    "sourceIPAddress": "192.0.2.0",
    "userAgent": "console.amazonaws.com",
    "requestParameters": {
        "deliveryChannel": {
            "name": "default",
            "configSnapshotDeliveryProperties": {
                "deliveryFrequency": "Twelve_Hours"
            },
            "s3BucketName": "config-bucket-123456789012-your-region"
        }
    },

Did this article help?


Do you need billing or technical support?