AWS Config Service Modified
Last updated
Last updated
This rule monitors for modifications to AWS Config.
AWS Config is a configuration monitoring tool, and changes to it could mean loss of visibility into configuration changes in your AWS account.
Remediation
If this Config change was not planned, revert the change and investigate who initiated it.
References
CIS AWS Benchmark 3.9: "Ensure a log metric filter and alarm exist for AWS Config configuration changes"
Risk
Remediation Effort
Medium
Low