Questions tagged [aws-config]

AWS config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are related to one another, and how the configurations and their relationships have changed over time.

AWS Config documentation

124 questions
1
vote
1 answer

AWS Config rules evaluations count

AWS Newbie here. Guys, can you help on how to can get/view the current count of AWS Config rules evaluations? https://aws.amazon.com/config/pricing/
mr1110
  • 45
  • 1
  • 5
1
vote
2 answers

Retrieve List of AWS Config Rule Names using AWS Golang SDK

AWS Config has a set of Managed Rules and I am trying to use the Golang AWS SDK to use the DescribeConfigRules API to retrieve the list of AWS Config Managed Rule Names and other details. It seems like every request receives a response of 25 rules…
Aakash
  • 3,101
  • 8
  • 47
  • 78
1
vote
1 answer

Can depends_on in terraform be set to a file path?

I am trying to break down my main.tf file . So I have set aws config via terraform, created the configuration recorder and set the delivery channel to a s3 bucket created in the same main.tf file. Now for the AWS config rules, I have created a…
1
vote
1 answer

How to get AWS config aggregate resources

I am unable to get AWS Config aggregated discovered resources using Python3 and boto3. Python=3.7 Boto3=1.9.42 Using AWS SAM to locally test Lambda function but I have the same problem when I run the Lambda within AWS. client =…
tavor999
  • 447
  • 6
  • 25
1
vote
1 answer

AWS Config and Troposhpere

I'm looking for documentation on how to configure AWS Config utilizing Troposphere. Unfortunately I am having a hard time finding useful documentation for this particular case. I've looked over the Troposphere documentation on GitHub but can't seem…
0
votes
0 answers

How do I check in AWS Config query whether particular key exists or not?

Down below is my original query to check non_compliance for codebuild-project-s3-logs-encrypted It returning 0 results. Well, I observed for some buckets, key s3Logs only not there, so that would be default, non_compliant. same with…
Hardik Patil
  • 515
  • 1
  • 4
  • 16
0
votes
0 answers

How to use configuration file from ~/.aws/config instead of shared-credentials-file location?

When I list the credentials this is the output: aws configure list Name Value Type Location ---- ----- ---- -------- profile None …
Tabares
  • 4,083
  • 5
  • 40
  • 47
0
votes
2 answers

How to define a elb-custom-security-policy-ssl-check aws config rule

I have the following description of the aws config elb-custom-security-policy-ssl-check rule: Identifier: ELB_CUSTOM_SECURITY_POLICY_SSL_CHECK Resource Types: AWS::ElasticLoadBalancing::LoadBalancer Trigger type: Configuration…
0
votes
0 answers

Is it the intended behaviour of Karpenter to record huge amount of EC2 fleet resources in AWS Config?

**Info:**When using Karpenter as an autoscaler in my EKS cluster, tens of thousands of entries is recorded in AWS Config with the resource type "resourceType":"AWS::EC2::EC2Fleet". Goal: I would like it to not do that, because the cost of AWS Config…
uggl
  • 31
  • 3
0
votes
0 answers

Does aws config pricing model include the number of api requests?

I use the configService (AWS Config API) to retrieve the history of configurations of all resources recorded by the aws config service. I use exactly these two endpoints : listDiscoveredResources getResourceConfigHistory Since there are multiple…
oswaldo
  • 23
  • 1
  • 4
0
votes
1 answer

Baseline Config not deployed in Control Tower regions

I have a Control Tower setup that includes eu-west-1 as the default region and a couple of other regions as governed regions (us-east-1, us-east-2, us-west-2, ap-southeast-2 and af-south-1). I have noticed that the only region that has the baseline…
0
votes
0 answers

Too many EC2 fleet resources recorded in AWS Config

In AWS Config there are 63k recorded EC2 Fleet resources. Config that I currently have is 1 EKS cluster with 6 node groups and 17 nodes. I don't have any other instances running. Is this correct? And if not - how can I track what is the problem…
0
votes
1 answer

Structuring non-application specific infrastructure deployment with AWS CDK

Currently setting up CDK from scratch here and looking for justification and best practices from the trenches. I have multiple apps which I will naturally have my CDK code and the app code in one repo (reeping the benefits of synonymous languages…
0
votes
0 answers

Getting a persistent config issue when setting up AWS SES in a NextJS application

After a long time of reading docs and debugging, I have been stuck on this error for a while and cannot seem to find any fix: CredentialsError: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1 import aws from…
0
votes
0 answers

run ec2 user-data on startup for every new launch

Is there a way to automatically run user-data for every ec2-instance launched for all AMIs? I want to configure where it will run a script without user putting it in. Is it possible with AWS config?
1 2 3
8 9