Learning Objectives

You can establish detective controls that discover changes to your AWS infrastructure and apply rules that you define to determine if the resource is compliant or noncompliant.

By the end of this lesson, you will be able to describe the AWS Config service and how to use AWS Config Rules to detect changes that violate organizational or team rules. You will also configure and run managed Config Rules against your AWS account, and then apply these rules by launching a CloudFormation stack.

By the end of this lesson, you will be able to do the following:

• Describe AWS Config and Config Rules
• Configure Managed Rules to run on your AWS account
• Run Managed Config Rules from the console
• Run Managed Config Rules using CloudFormation