AWS config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are related to one another, and how the configurations and their relationships have changed over time.
Questions tagged [aws-config]
124 questions
1
vote
1 answer
AWS Config rules evaluations count
AWS Newbie here.
Guys, can you help on how to can get/view the current count of AWS Config rules evaluations?
https://aws.amazon.com/config/pricing/

mr1110
- 45
- 1
- 5
1
vote
2 answers
Retrieve List of AWS Config Rule Names using AWS Golang SDK
AWS Config has a set of Managed Rules and I am trying to use the Golang AWS SDK to use the DescribeConfigRules API to retrieve the list of AWS Config Managed Rule Names and other details.
It seems like every request receives a response of 25 rules…

Aakash
- 3,101
- 8
- 47
- 78
1
vote
1 answer
Can depends_on in terraform be set to a file path?
I am trying to break down my main.tf file . So I have set aws config via terraform, created the configuration recorder and set the delivery channel to a s3 bucket created in the same main.tf file. Now for the AWS config rules, I have created a…

Kashyap Sharma
- 109
- 2
- 10
1
vote
1 answer
How to get AWS config aggregate resources
I am unable to get AWS Config aggregated discovered resources using Python3 and boto3.
Python=3.7
Boto3=1.9.42
Using AWS SAM to locally test Lambda function but I have the same problem when I run the Lambda within AWS.
client =…

tavor999
- 447
- 6
- 25
1
vote
1 answer
AWS Config and Troposhpere
I'm looking for documentation on how to configure AWS Config utilizing Troposphere. Unfortunately I am having a hard time finding useful documentation for this particular case. I've looked over the Troposphere documentation on GitHub but can't seem…

CodeHappy
- 71
- 2
- 10
0
votes
0 answers
How do I check in AWS Config query whether particular key exists or not?
Down below is my original query to check non_compliance for codebuild-project-s3-logs-encrypted
It returning 0 results. Well, I observed for some buckets, key s3Logs only not there, so that would be default, non_compliant. same with…

Hardik Patil
- 515
- 1
- 4
- 16
0
votes
0 answers
How to use configuration file from ~/.aws/config instead of shared-credentials-file location?
When I list the credentials this is the output:
aws configure list
Name Value Type Location
---- ----- ---- --------
profile None …

Tabares
- 4,083
- 5
- 40
- 47
0
votes
2 answers
How to define a elb-custom-security-policy-ssl-check aws config rule
I have the following description of the aws config elb-custom-security-policy-ssl-check rule:
Identifier: ELB_CUSTOM_SECURITY_POLICY_SSL_CHECK
Resource Types: AWS::ElasticLoadBalancing::LoadBalancer
Trigger type: Configuration…

George Udosen
- 906
- 1
- 13
- 28
0
votes
0 answers
Is it the intended behaviour of Karpenter to record huge amount of EC2 fleet resources in AWS Config?
**Info:**When using Karpenter as an autoscaler in my EKS cluster, tens of thousands of entries is recorded in AWS Config with the resource type "resourceType":"AWS::EC2::EC2Fleet".
Goal: I would like it to not do that, because the cost of AWS Config…

uggl
- 31
- 3
0
votes
0 answers
Does aws config pricing model include the number of api requests?
I use the configService (AWS Config API) to retrieve the history of configurations of all resources recorded by the aws config service.
I use exactly these two endpoints :
listDiscoveredResources
getResourceConfigHistory
Since there are multiple…

oswaldo
- 23
- 1
- 4
0
votes
1 answer
Baseline Config not deployed in Control Tower regions
I have a Control Tower setup that includes eu-west-1 as the default region and a couple of other regions as governed regions (us-east-1, us-east-2, us-west-2, ap-southeast-2 and af-south-1).
I have noticed that the only region that has the baseline…

Tegue Morrison
- 21
- 4
0
votes
0 answers
Too many EC2 fleet resources recorded in AWS Config
In AWS Config there are 63k recorded EC2 Fleet resources. Config that I currently have is 1 EKS cluster with 6 node groups and 17 nodes. I don't have any other instances running.
Is this correct? And if not - how can I track what is the problem…

Yaroslav Bezruchenko
- 29
- 5
0
votes
1 answer
Structuring non-application specific infrastructure deployment with AWS CDK
Currently setting up CDK from scratch here and looking for justification and best practices from the trenches.
I have multiple apps which I will naturally have my CDK code and the app code in one repo (reeping the benefits of synonymous languages…

DimitriosK
- 38
- 6
0
votes
0 answers
Getting a persistent config issue when setting up AWS SES in a NextJS application
After a long time of reading docs and debugging, I have been stuck on this error for a while and cannot seem to find any fix: CredentialsError: Missing credentials in config, if using AWS_CONFIG_FILE, set AWS_SDK_LOAD_CONFIG=1
import aws from…

Arnav C
- 23
- 3
0
votes
0 answers
run ec2 user-data on startup for every new launch
Is there a way to automatically run user-data for every ec2-instance launched for all AMIs? I want to configure where it will run a script without user putting it in. Is it possible with AWS config?

Niko Belly
- 21
- 1
- 6