Setting Up Amazon Config with the Amazon CLI
You can use the Amazon Command Line Interface to control and automate the services from Amazon. For more information about the Amazon CLI and for instructions on installing the Amazon CLI tools, see the following in the Amazon Command Line Interface User Guide.
Features
You can use the Amazon Command Line Interface to get started with Amazon Config to do the following:
Resource management
-
Specify the resource types you want Amazon Config to record.
-
Set up an Amazon S3 bucket to receive a configuration snapshot on request and configuration history.
-
Set up Amazon SNS to send configuration stream notifications.
-
Grant Amazon Config the permissions it needs to access the Amazon S3 bucket and the Amazon SNS topic.
For more information, see Viewing Amazon Resource Configurations and History and Managing Amazon Resource Configurations and History.
Rules and conformance packs
-
Specify the rules that you want Amazon Config to use to evaluate compliance information for the recorded resource types.
-
Use conformance packs, or a collection of Amazon Config rules and remediation actions that can be deployed and monitored as a single entity in your Amazon account.
For more information, see Evaluating Resources with Amazon Config Rules and Conformance Packs.
Aggregators
-
Use an aggregator to get a centralized view of your resource inventory and compliance. An aggregator is an Amazon Config resource type that collects Amazon Config configuration and compliance data from multiple Amazon accounts and Amazon Regions into a single account and Region.
For more information, see Multi-Account Multi-Region Data Aggregation .
Advanced queries
-
Use one of the sample queries or write your own query by referring to the configuration schema of the Amazon resource.
For more information, see Querying the Current Configuration State of Amazon Resources .
Setting up
See the following topics to set up Amazon Config with the Amazon CLI.