Setting Up AWS Config with the AWS CLI
You can use the AWS Command Line Interface to control and automate the services from AWS. For more information about the AWS CLI and for instructions on installing the AWS CLI tools, see the following in the AWS Command Line Interface User Guide.
Features
You can use the AWS Command Line Interface to get started with AWS Config to do the following:
Resource management
-
Specify the resource types you want AWS Config to record.
-
Set up an Amazon S3 bucket to receive a configuration snapshot on request and configuration history.
-
Set up Amazon SNS to send configuration stream notifications.
-
Grant AWS Config the permissions it needs to access the Amazon S3 bucket and the Amazon SNS topic.
For more information, see Viewing AWS Resource Configurations and History and Managing AWS Resource Configurations and History.
Rules and conformance packs
-
Specify the rules that you want AWS Config to use to evaluate compliance information for the recorded resource types.
-
Use conformance packs, or a collection of AWS Config rules and remediation actions that can be deployed and monitored as a single entity in your AWS account.
For more information, see Evaluating Resources with AWS Config Rules and Conformance Packs.
Aggregators
-
Use an aggregator to get a centralized view of your resource inventory and compliance. An aggregator is an AWS Config resource type that collects AWS Config configuration and compliance data from multiple AWS accounts and AWS Regions into a single account and Region.
For more information, see Multi-Account Multi-Region Data Aggregation .
Advanced queries
-
Use one of the sample queries or write your own query by referring to the configuration schema of the AWS resource.
For more information, see Querying the Current Configuration State of AWS Resources .
Setting up
See the following topics to set up AWS Config with the AWS CLI.
