# AWS Config Service Modified

This rule monitors for modifications to AWS Config.

| Risk       | Remediation Effort |
| ---------- | ------------------ |
| **Medium** | **Low**            |

AWS Config is a configuration monitoring tool, and changes to it could mean loss of visibility into configuration changes in your AWS account.

**Remediation**

If this Config change was not planned, revert the change and investigate who initiated it.

**References**

* CIS AWS Benchmark 3.9: "Ensure a log metric filter and alarm exist for AWS Config configuration changes"