Document History
The following table describes the important changes to the documentation for AWS Config. For notification about updates to this documentation, you can subscribe to an RSS feed.
-
API version: 2014-11-12
-
Latest documentation update: January 09, 2026
| Change | Description | Date |
|---|---|---|
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | January 9, 2026 |
AWS Config supports new permissions required for S3 Tables | With this release, AWS Config added new required permissions to record S3 Tables resource types. For more information, see Supported resource types. | January 9, 2026 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | December 8, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | December 8, 2025 |
Document History | The example Cross-Account S3 Bucket Policy no longer includes the | December 3, 2025 |
Security IAM updates | The | November 20, 2025 |
Security IAM update | AWS Config has updated the managed policy | November 11, 2025 |
Security IAM update | AWS Config has updated the managed policy | November 10, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | October 27, 2025 |
AWS Config supports new resource types | With this release, you can use AWS Config to record configuration changes to new Amazon API Gateway, AWS CloudTrail, and AWS Config resource types. For more information, see Supported resource types. | October 10, 2025 |
AWS Config supports new conformance pack | With this release, AWS Config supports the following conformance pack: Cyber Resilience Best Practices for Amazon S3, Amazon EBS, and Amazon DynamoDB | October 3, 2025 |
Security IAM updates | The | October 1, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | October 1, 2025 |
AWS Config supports new resource types in the Asia Pacific (Taipei) Region region | With this release, AWS Config now supports the following AWS WAFV2 resource types in the Asia Pacific (Taipei) Region region:
For more information, see Resource Coverage by Region Availability. | September 23, 2025 |
AWS Config updates conformance packs | With this release, AWS Config has updated the following conformance packs: | September 9, 2025 |
AWS Config supports new resource types | With this release, you can use AWS Config to record configuration changes to new AWS CodeArtifact, AWS Config, AWS Glue, AWS Network Manager, and AWS Identity and Access Management resource types. For more information, see Supported resource types. | September 3, 2025 |
AWS Config supports new resource types | With this release, you can use AWS Config to record configuration changes to new AWS Backup, Amazon OpenSearch Service, Amazon EC2, Amazon Managed Streaming for Apache Kafka, Amazon Redshift, Route 53 Profiles, AWS Systems Manager Incident Manager, AWS Transfer Family, and Amazon CloudFront resource types. For more information, see Supported resource types. | August 15, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | August 14, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | August 13, 2025 |
Security IAM updates | The | July 28, 2025 |
Security IAM updates | The | July 28, 2025 |
AWS Config supports new resource types | With this release, you can use AWS Config to record configuration changes to new AWS Backup, AWS Billing and Cost Management, CloudFormation, Amazon CloudFront, AWS Entity Resolution, AWS IoT, AWS Private Certificate Authority, Amazon Relational Database Service, and Amazon S3 resource types. For more information, see Supported resource types. | July 15, 2025 |
Security IAM updates | The | June 18, 2025 |
AWS Config supports new resource types | With this release, you can use AWS Config to record configuration changes to new Amazon Bedrock resource types. For more information, see Supported resource types. | June 17, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | June 13, 2025 |
Security IAM update | The | May 27, 2025 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon App Integrations, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Inspector, Amazon Macie, Amazon Route 53 Profiles, Amazon OpenSearch Serverless, Amazon Simple Storage Service (Amazon S3), AWS Security Hub CSPM, and Amazon SageMaker AI resource types. For more information, see Supported Resource Types. | April 30, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: redshift-serverless-default-db-name-check | April 22, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: redshift-serverless-default-admin-check | April 17, 2025 |
Security IAM update | The | April 8, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 1, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | March 22, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | March 19, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | March 18, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: ec2-instance-launched-with-allowed-ami | March 11, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | March 7, 2025 |
Security IAM update | The | March 4, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | February 8, 2025 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Simple Storage Service (Amazon S3) resource types. For more information, see Supported Resource Types. | February 6, 2025 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Simple Storage Service (Amazon S3) resource types. For more information, see Supported Resource Types. | January 29, 2025 |
Security IAM update | The | January 16, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | January 9, 2025 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud (Amazon EC2) resource types. For more information, see Supported Resource Types. | January 9, 2025 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | January 8, 2025 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud (Amazon EC2), Amazon Cognito, AWS Elemental MediaConnect, and Amazon OpenSearch Service resource types. For more information, see Supported Resource Types. | December 19, 2024 |
Security IAM update | The | December 18, 2024 |
AWS Config supports service-linked configuration recorders | With this release, AWS Config supports service-linked configuration recorders. You enable a service-linked configuration recorder in the supported service or using the AWS CLI, and the recorder records the resource types needed for the linked service on your behalf. You can view details of a service-linked configuration recorder using the AWS Config console or AWS CLI. For more information, see Working with the configuration recorder. | November 27, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | November 12, 2024 |
Security IAM update | The | November 8, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: cognito-user-pool-advanced-security-enabled | November 6, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | October 21, 2024 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | September 23, 2024 |
Security IAM update | The | September 16, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | September 3, 2024 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | August 27, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | July 22, 2024 |
Security IAM update | The | June 17, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | May 8, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: iam-external-access-analyzer-enabled | May 2, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 26, 2024 |
AWS Config simplifies usage analysis with Amazon CloudWatch | With this release, the Amazon CloudWatch metrics for monitoring AWS Config data usage will display only billable usage. This means, non-billable usage will no longer be displayed in both the Amazon CloudWatch metrics emitted to AWS Config and the AWS Config console. This allows you to validate AWS Config setup and usage using Amazon CloudWatch metrics and correlate billable usage with associated costs. For more information, see AWS Config Usage and Success Metrics. | April 26, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: iam-server-certificate-expiration-check | April 23, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 17, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 16, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: efs-mount-target-public-accessible | March 20, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | February 26, 2024 |
Security IAM update | The | February 22, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: s3-bucket-cross-region-replication-enabled | February 12, 2024 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS AppConfig, Amazon CloudWatch Evidently, AWS Identity and Access Management (IAM), Amazon MemoryDB (MemoryDB), Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Redshift, and AWS Transfer Family resource types. For more information, see Supported Resource Types. | February 6, 2024 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rule: macie-auto-sensitive-data-discovery-check | January 29, 2024 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon AppStream, AWS Key Management Service (AWS KMS), Amazon Relational Database Service (Amazon RDS), Amazon Cognito, Amazon Elastic Compute Cloud (Amazon EC2), EC2 Image Builder, AWS Ground Station, AWS Mainframe Modernization, Amazon Quick Suite, Amazon Redshift, and AWS Systems Manager resource types. For more information, see Supported Resource Types. | January 3, 2024 |
Service limits increase for the maximum number of AWS Config Rules per Region per account | With this release, AWS Config supports 1000 AWS Config rules per AWS Region per account. This increase applies to the total of all deployed rules including AWS Config managed rules, AWS Config custom rules, AWS Config conformance packs, AWS Security Hub CSPM controls, AWS Firewall Manager policies, and AWS Backup backup plans per Region per account. For more information, see Service Limits. | December 19, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | December 19, 2023 |
Security IAM update | The | December 5, 2023 |
Preview release: Natural language query processor for advanced queries | With this release, you can use the natural language query processor for advanced queries, which uses generative artificial intelligence (generative AI) capabilities that allow you to ask questions in plain English and convert them into a ready-to-use query format. With the natural language query processor, you can query your AWS account or across an AWS organization. For more information, see Natural language query processor for advanced queries. | November 26, 2023 |
Periodic recording | With this release, AWS Config supports periodic recording. Periodic recording provides you with the ability to capture the latest configuration changes for your resources over a fixed period of time. You can now set the default frequency for the configuration recorder to Daily, allowing you to receive a configuration item (CI) representing the most recent state of your resources over the last 24-hour period, only if it’s different from the previous CI recorded. The AWS Config console also introduces a new recording strategy experience, where you can also override the recording frequency for specific resource types or exclude specific resource types from recording. This can help make your settings fit your granular requirements. The following data types are added: The following data types are updated: The following pages in the developer guide are updated: | November 26, 2023 |
Security IAM update | The The For more information, see AWS managed policies for AWS Config. | November 17, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | November 9, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS Identity and Access Management (IAM), AWS Network Manager, AWS Private Certificate Authority (AWS Private CA), AWS App Mesh, Amazon Connect, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Container Service (Amazon ECS), AWS IoT, AWS IoT TwinMaker, Amazon Managed Streaming for Apache Kafka Connect (Amazon MSK Connect), AWS Lambda, and AWS Resource Explorer resource types. For more information, see Supported Resource Types. | November 3, 2023 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance pack: Operational Best Practices for BNM RMiT | October 26, 2023 |
Compliance and Inventory Dashboards for Aggregators | With this release, AWS Config adds a compliance dashboard page and an inventory dashboard page to the aggregated view in the AWS Config console. For the compliance dashboard page, you can view automated dashboards with widgets that summarize insights on resource compliance within your aggregator, such as Top 10 resource types by noncompliant resources, Top 10 account level conformance packs by noncompliant rules, and more. For the inventory dashboard page, you can view automated dashboard with widgets that summarize insights on resource configuration data within your aggregator, such as Top 10 resource types by resource count, Top 10 accounts by resource count, and more. For information on the graph and charts, see Compliance dashboard and Inventory dashboard. | October 23, 2023 |
Security IAM update | The | October 4, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS IoT, AWS IoT TwinMaker, AWS IoT Wireless, Amazon Personalize Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon SageMaker AI, AWS CodeBuild, Amazon AppStream, and Amazon Inspector resource types. For more information, see Supported Resource Types. | October 4, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | September 21, 2023 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs: | September 8, 2023 |
Security IAM update | The | September 6, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon CodeGuru Profiler, AWS Elemental MediaConnect, AWS Transfer Family, Amazon Managed Service for Prometheus, AWS Batch, AWS Cloud Map, and Amazon Route 53 Resolver resource types. For more information, see Supported Resource Types. | September 6, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | August 10, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS Amplify, Amazon AppIntegrations, AWS App Mesh, Amazon Athena, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently, Amazon Forecast, AWS IoT Greengrass Version 2, AWS Ground Station, AWS Elemental MediaConvert, AWS Elemental MediaTailor, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Personalize, Amazon Pinpoint, and AWS Resilience Hub resource types. For more information, see Supported Resource Types. | August 3, 2023 |
Security IAM update | The | July 28, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Kinesis, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint, Amazon Simple Storage Service (Amazon S3), Amazon Virtual Private Cloud (Amazon VPC), Amazon Kendra, Amazon Connect, AWS CloudFormation, AWS AppConfig, AWS App Mesh, AWS App Runner, and AWS Database Migration Service (AWS DMS) resource types. For more information, see Supported Resource Types. | July 10, 2023 |
Service limits increase for organization conformance packs | With this release, AWS Config supports 350 AWS Config rules per region per account across all conformance packs and 350 organizational AWS Config rules per organization. For more information, see Service Limits. | June 13, 2023 |
Security IAM update | The | June 13, 2023 |
AWS Config Recording Exclusions by Resource Type | With this release, AWS Config allows you to exclude specific types of AWS resources from inventory tracking and compliance monitoring while still tracking all other supported resource types currently available in AWS Config, including those that will be added in the future. You can use this feature to concentrate on critical resources that are subject to your compliance and governance standards. The updates to the API for the configuration recorder and recording group are backward compatible, meaning that they work with previous versions of the PutConfigurationRecorder API. You can continue to manage which resource types are recorded in the exact same way as before without using the updated or new APIs. The following data types are added: The following data types are updated: The following page in the developer guide is updated: | June 9, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Container Service (Amazon ECS), Amazon Keyspaces (for Apache Cassandra) (Amazon Keyspaces), AWS Signer, AWS Amplify, AWS App Mesh, AWS App Runner, Amazon WorkSpaces Applications, AWS CodeArtifact, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently, Amazon Forecast, AWS Identity and Access Management (IAM), Amazon Pinpoint, Amazon SageMaker AI, AWS Transfer Family, Amazon Data Firehose resource types. For more information, see Supported Resource Types. | June 5, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | May 10, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Route 53 Resolver, Amazon Elastic Compute Cloud (Amazon EC2), AWS IoT Wireless, AWS Network Manager, AWS Device Farm, AWS Ground Station, Amazon AppFlow, Amazon Redshift, Amazon Pinpoint, AWS IoT, AWS AppConfig, EC2 Image Builder, Amazon CloudWatch, AWS Panorama, Amazon SageMaker Runtime, Amazon ECR, and AWS Audit Manager resource types. For more information, see Supported Resource Types. | May 5, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to
| May 1, 2023 |
Security IAM update | The | April 13, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 10, 2023 |
Service limits increase for organization conformance packs | With this release, AWS Config supports 350 AWS Config rules per account across all organization conformance packs. For more information, see Service Limits. | April 3, 2023 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 3, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon WorkSpaces Applications, AWS Auto Scaling, Amazon Connect Amazon Elastic Compute Cloud, Amazon EventBridge, HealthLake, Kinesis video stream, AWS IoT TwinMaker, Lookout for Vision, Network Manager, Amazon Pinpoint, Amazon Application Recovery Controller (ARC), and AWS RoboMaker resource types. For more information, see Supported Resource Types. | April 3, 2023 |
Security IAM update | The | March 30, 2023 |
Security IAM update | The | March 3, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS Elemental MediaPackage, Amazon EventBridge, AWS IoT, (Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Lookout for Metrics, Amazon Lex, AWS Budgets, AWS Device Farm, Amazon CodeGuru Reviewer, Amazon Route 53 Resolver, and AWS RoboMaker resource types. For more information, see Supported Resource Types. | March 2, 2023 |
Security IAM update | AWS Config now tracks changes to the | February 27, 2023 |
AWS Config Resource Coverage by Region Availability | With this release, AWS Config provides Region information for each supported resource type. For information on which resource types are supported in which Regions, see Resource Coverage by Region Availability. | February 20, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Interactive Video Service (Amazon IVS), Amazon Simple Storage Service (Amazon S3), AWS Glue, Amazon Elastic Kubernetes Service (Amazon EKS), AWS IoT, Amazon Relational Database Service (Amazon RDS), and Managed Service for Apache Flink resource types. For more information, see Supported Resource Types. | February 7, 2023 |
Security IAM update | The | February 1, 2023 |
Security IAM update | As a security best practice, the | January 12, 2023 |
Security IAM update | The | January 10, 2023 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon MQ, AWS AppConfig, AWS Cloud9, Amazon EventBridge schemas, Amazon Fraud Detector, AWS IoT, AWS IoT Analytics, Amazon Lightsail, AWS Elemental MediaPackage (MediaPackage), Amazon Application Recovery Controller (ARC), AWS Resilience Hub, and AWS Transfer Family resource types. For more information, see Supported Resource Types. | January 5, 2023 |
AWS Config rule resource coverage | With this release, AWS Config displays the resource type coverage for an increased number of AWS Config managed rules. | December 21, 2022 |
AWS Config rule discoverability | With this release, AWS Config supports pages for List of AWS Config Managed Rules by Evaluation Mode, List of AWS Config Managed Rules by Trigger Type, and List of AWS Config Managed Rules by Region Availability. | December 21, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs: | December 19, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | December 9, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon CloudWatch RUM, Amazon EventBridge, Amazon GuardDuty, Amazon Simple Email Service (Amazon SES), AWS Backup, AWS DataSync, and AWS Fault Injection Service (AWS FIS) resource types. For more information, see Supported Resource Types. | December 9, 2022 |
AWS Config Proactive Compliance | With this release, AWS Config supports the ability to proactively check for compliance with AWS Config rules before resource provisioning. This allows you to evaluate the configuration settings of your resources before they are created or updated. Use AWS Config to track the configuration changes made to your resources, either pre-provisioning or post-provisioning, and check if your resources match your desired configurations. The following data types are added: The following data types are updated: The following pages in the developer guide are updated: | November 28, 2022 |
Drift Detection as Configuration Item (CI) for the AWS Config Configuration Recorder | With this release, AWS Config tracks all changes to the configuration recorder to
indicate if the state of the configuration recorder differs, or has
drifted, from its previous state; for example, if there
are updates to resource types that you have enabled AWS Config to track, if you have
stopped or started the configuration recorder, or if you have deleted or
uninstalled the configuration recorder. The
| November 18, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new AWS IoT Events, AWS Cloud Map, EC2 Image Builder, AWS DataSync, AWS Glue, Amazon Application Recovery Controller (ARC), and Amazon Elastic Container Registry (Amazon ECR) resource types. For more information, see Supported Resource Types. | November 8, 2022 |
Security IAM update | The | November 7, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance packs are updated: | October 27, 2022 |
Security IAM update | The | October 19, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud (Amazon EC2), Amazon Simple Email Service (Amazon SES), AWS AppConfig, AWS Cloud Map, and AWS DataSync resource types. For more information, see Supported Resource Types. | October 6, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon GuardDuty, Amazon SageMaker AI, AWS AppSync, AWS Cloud Map, and AWS DataSync resource types. For more information, see Supported Resource Types. | October 4, 2022 |
AWS Config supports new conformance pack | With this release, AWS Config updates the Operational Best Practices for SWIFT CSP conformance pack. | October 4, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance packs are updated: | September 30, 2022 |
Security IAM update | The | September 14, 2022 |
AWS Config supports new conformance pack | With this release, AWS Config supports the Operational Best Practices for SWIFT CSP conformance pack. | September 9, 2022 |
Security IAM update | The | September 7, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance packs are updated: | August 31, 2022 |
Getting Started with AWS Config and Custom Conformance Pack updates | With this release, AWS Config updates the Getting Started with AWS Config and Setting Up AWS Config with the Console pages, introducing a 1-click setup and Manual setup page. AWS Config also updates the Custom Conformance Pack page with a walkthrough on how to create a conformance pack YAML file from scratch. | August 25, 2022 |
AWS Systems Manager Document (SSM document) Integration with Conformance Packs | With this release, you can create a conformance pack template with an SSM document. For more information on SSM documents, see AWS Systems Manager Documents in the AWS Systems Manager User Guide. The following data types are updated: The following pages in the developer guide are updated: | August 24, 2022 |
Security IAM update | The | August 22, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Athena, Amazon Detective, Amazon SageMaker AI, Amazon Route 53, AWS Database Migration Service (AWS DMS), AWS Glue, AWS Key Management Service (AWS KMS), and Amazon Simple Email Service (Amazon SES) resource types. For more information, see Supported Resource Types. | August 16, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs: | August 1, 2022 |
Compliance score for conformance packs | With this release, AWS Config introduces compliance score for conformance packs, which provides you with a high-level view of the compliance state of your conformance packs. You can use it to identify, investigate, and understand the level of compliance in your conformance packs. A compliance score is the percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack. The following data types are updated: The following pages in the developer guide are updated: | July 26, 2022 |
Security IAM update | The | July 25, 2022 |
Security IAM update | The | July 15, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud (Amazon EC2) resource types. For more information, see Supported Resource Types. | July 8, 2022 |
AWS Config supports new resources type | With this release, you can use AWS Config to record configuration changes to new AWS Global Accelerator resource types. For more information, see Supported Resource Types. | July 5, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | July 1, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance packs are updated: | June 30, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon SageMaker AI resource types. For more information, see Supported Resource Types. | June 29, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Route 53, Amazon WorkSpaces, AWS Batch, AWS Identity and Access Management Access Analyzer (IAM Access Analyzer), AWS Database Migration Service (AWS DMS), AWS Step Functions, and Elastic Load Balancing resource types. For more information, see Supported Resource Types. | June 14, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | June 13, 2022 |
AWS Config Integration with AWS Security Hub CSPM | With this release, you can see the results of AWS Config managed and custom rule evaluations as findings in AWS Security Hub CSPM. Security Hub CSPM transforms rule evaluations into findings, which provide more information about the impacted resources, such as the Amazon Resource Name (ARN) and creation date. These findings can be viewed alongside other Security Hub CSPM findings, providing a comprehensive overview of your security posture. For more information, see Sending Rule Evaluations to Security Hub CSPM | June 7, 2022 |
Security IAM update | The | May 31, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | May 31, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon SageMaker AI and AWS Step Functions resource types. For more information, see Supported Resource Types. | May 26, 2022 |
AWS Config supports new conformance pack | With this release, AWS Config updates the Operational Best Practices for NERC CIP BCSI conformance pack. | May 20, 2022 |
Components of an AWS Config Rule | With this release, AWS Config introduces a Components of an AWS Config Rule page. The page discusses the structure of rule definitions, rule metadata, and best practices on how to write rules with Python using the AWS Config Rules Development Kit (RDK) and AWS Config Rules Development Kit Library (RDKlib). | May 9, 2022 |
Service limits increase for organization conformance packs | With this release, AWS Config supports 180 AWS Config rules per account across all organization conformance packs. For more information, see Service Limits. | May 6, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | April 29, 2022 |
AWS Config updates managed rule | With this release, AWS Config supports the s3-resources-protected-by-backup-plan managed rule. | April 11, 2022 |
Security IAM update | The | April 7, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 4, 2022 |
AWS Config Custom Policy rules | With this release, AWS Config allows you to create AWS Config Custom Policy rules using
AWS CloudFormation Guard (guard The following pages in the developer guide are updated: The following data types are updated: | April 4, 2022 |
AWS Config supports new resources type | With this release, you can use AWS Config to record configuration changes to the new Amazon EMR SecurityConfiguration resource type. For more information, see Supported Resource Types. | March 31, 2022 |
AWS Config updates managed rule | With this release, AWS Config supports the virtualmachine-resources-protected-by-backup-plan managed rule. | March 29, 2022 |
AWS Config Integration with Amazon CloudWatch Metrics | With this release, AWS Config now supports tracking of your AWS Config usage and success metrics with Amazon CloudWatch in the AWS Config Dashboard page. CloudWatch metrics is a monitoring service which provides data about the performance of your systems, including the ability to search, graph, and build alarms on metrics about AWS resources. From the AWS Config Dashboard, you can see what traffic is driving your AWS Config usage and key metrics for failures that have occured in your workflow. The following page is updated: | March 29, 2022 |
AWS Config supports new resources type | With this release, you can use AWS Config to record configuration changes to new Amazon GuardDuty Detector resource type. For more information, see Supported Resource Types. | March 24, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | March 23, 2022 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs:
| March 16, 2022 |
Security IAM update | The | March 14, 2022 |
AWS Config updates managed rules | With this release, AWS Config updates the following managed rules: | March 10, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Container Registry Public resource types. For more information, see Supported Resource Types. | March 4, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud resource types. For more information, see Supported Resource Types. | February 28, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | February 25, 2022 |
Logging and Monitoring in AWS Config Update | With this release, AWS Config updates the Monitoring AWS Config with Amazon EventBridge Events page to replace references to Amazon CloudWatch Events. Amazon EventBridge is the preferred way to manage your events. CloudWatch Events and EventBridge are the same underlying service and API, but EventBridge provides more features. Changes you make in either CloudWatch or EventBridge will appear in each console. For more informance, see Amazon EventBridge. | February 24, 2022 |
AWS SDK Page for AWS Config | With this release, AWS Config introduces a Using AWS Config with an AWS SDK page. AWS software development kits (SDKs) are available for many popular programming languages. Each SDK provides an API, code examples, and documentation that make it easier for developers to build applications in their preferred language. | February 24, 2022 |
Security IAM Role Trust policy update | With this release, AWS Config updates the IAM trust policy statement to include
security protections in the trust policy that restrict access with
The following page is updated: | February 18, 2022 |
Changes to Global Resource Type Recording | AWS Config now changes how new global resource types are recorded in AWS Config Recording. Global resource types are AWS resources that do not require you to specify a region at creation. Before this change, you could enable the recording of global resource types in all supported regions in AWS Config. After this change, new global resource types onboarded to AWS Config recording can only be recorded in the service's home region for the commercial partition, and AWS GovCloud (US-West) for the AWS GovCloud (US) partition. You will now be able to view the configuration items for these new global resource types only in their home region and AWS GovCloud (US-West). For a list of home regions for global resource types onboarded after February 2022, see the table on the Recording All Supported Resource Types page. | February 18, 2022 |
Security IAM update | The | February 10, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | February 10, 2022 |
Security IAM update | The | February 2, 2022 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | January 31, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to AWS CodeDeploy resource types. For more information, see Supported Resource Types. | January 5, 2022 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon SageMaker AI resource types. For more information, see Supported Resource Types. | December 20, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | December 20, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance pack is updated: | November 18, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: The following conformance packs are updated: | October 29, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon OpenSearch Service resource types. For more information, see Supported Resource Types. | October 12, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance pack: | October 12, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs: | September 30, 2021 |
Security IAM update | The | September 8, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to new Amazon Elastic Compute Cloud resource types. For more information, see Supported Resource Types. | September 7, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config updates the following conformance packs:
| August 30, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | August 20, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance pack: | August 20, 2021 |
Security Amazon SNS policy update | With this release, AWS Config updates the IAM policy statement for the Amazon SNS topic
when using service-linked roles to include security protections that restrict
access with The following page is updated: | August 17, 2021 |
Security AWS Lambda policy update | With this release, AWS Config updates the AWS Lambda resource-based policy for AWS Config
custom rules to include security protections that restrict access with
The following pages are updated: | August 12, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to Amazon Kinesis resource types. For more information, see Supported Resource Types. | August 6, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance pack: The following conformance packs are updated:
| July 30, 2021 |
Example AWS Lambda Functions for AWS Config Custom Rules | With this release, AWS Config provides Python example functions in Example AWS Lambda Functions for AWS Config Rules (Python). | July 29, 2021 |
Security IAM update | The | July 28, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to AWS Backup resource types. For more information, see Supported Resource Types. | July 14, 2021 |
AWS Config supports new conformance packs | With this release, AWS Config supports the following conformance packs: | July 9, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | June 25, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | June 10, 2021 |
Security IAM update | The | June 8, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | May 19, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to Amazon Elastic File System resource types. For more information, see Supported Resource Types. | May 13, 2021 |
Security IAM update | The | May 10, 2021 |
AWS Config Custom Rules | The following pages in the developer guide are updated: | April 30, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | April 15, 2021 |
Security IAM update | The | April 14, 2021 |
Conformance Pack Compliance as Configuration Items (CIs) | With this release, AWS Config supports conformance pack compliance as configuration items. This enables you to:
The following data types are updated: The following pages in the developer guide are updated: | March 30, 2021 |
Pagination update | With this release, AWS Config advanced queries feature now supports pagination for queries that contain aggregate functions, such as COUNT and SUM. You can now use advanced queries to get complete results for your aggregate queries through pagination, which were previously limited to 500 rows. For more information, see Querying the Current Configuration State of AWS Resources | March 26, 2021 |
Region support | With this release, AWS Config and AWS Config Rules is now supported in Asia Pacific (Osaka) Region. | March 4, 2021 |
AWS Config supports new resources types | With this release, you can use AWS Config to record configuration changes to Amazon Elastic Container Registry, Amazon Elastic Container Service, and Amazon Elastic Kubernetes Service resource types. For more information, see Supported Resource Types. | February 25, 2021 |
KMS encryption support | With this release, AWS Config allows you to use KMS-based encryption on objects delivered by AWS Config for S3 bucket delivery. The following data types are updated: The following pages in the developer guide are updated: | February 16, 2021 |
AWS Config updates managed rules | With this release, AWS Config supports the following managed rules: | February 16, 2021 |
Saved Query Region support | With this release, saved query is now supported in AWS GovCloud (US-East) and AWS GovCloud (US-West) Regions. | February 15, 2021 |
Advanced queries Region support | With this release, advanced queries is now supported in Africa (Cape Town) and Europe (Milan) Regions. For more information, see Querying the Current Configuration State of AWS Resources. | February 15, 2021 |
AWS Config documentation history notification available through RSS feed | You can now receive notification about updates to the AWS Config documentation by subscribing to an RSS feed. | January 1, 2021 |