AWS_Config_5

Ensure that the configuration recorder is set to on" and set S3 Bucket and SNS topic as your delivery channel"

Description

AWS Config uses the configuration recorder to detect changes in your resource configurations and capture these changes as configuration items. You must create a configuration recorder before AWS Config can track your resource configurations.As AWS Config continually records the changes that occur to your AWS resources, it sends notifications and updated configuration states through the delivery channel. You can manage the delivery channel to control where AWS Config sends configuration updates. You can have only one delivery channel per region per AWS account, and the delivery channel is required to use AWS Config.

Remediation

12. Now the CMK must be implemented to encrypt/decrypt the EBS volume data. Navigate to EC2 dashboard.

Service

AWS Config

Severity

High

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!