Amazon Config configuration recorder - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Config configuration recorder

With Quick Setup, a capability of Amazon Systems Manager, you can quickly create a configuration recorder powered by Amazon Config. Use the configuration recorder to detect changes in your resource configurations and capture the changes as configuration items. If you're unfamiliar with Amazon Config, we recommend learning more about the service by reviewing the content in the Amazon Config Developer Guide before creating a configuration with Quick Setup. For more information about Amazon Config, see What is Amazon Config? in the Amazon Config Developer Guide.

By default, the configuration recorder records all supported resources in the Amazon Web Services Region where Amazon Config is running. You can customize the configuration so that only the resource types you specify are recorded. For more information, see Selecting which resources Amazon Config records in the Amazon Config Developer Guide.

You're charged service usage fees when Amazon Config starts recording configurations. For pricing information, see Amazon Config pricing.

Note

If you've already created a configuration recorder, Quick Setup doesn't stop recording or make any changes to resource types that you're already recording. If you choose to record additional resource types using Quick Setup, the service appends them to your existing recorder groups. Deleting the Quick Setup Config recording configuration type doesn't stop the configuration recorder. Changes continue to be recorded, and service usage fees apply until you stop the configuration recorder. To learn more about managing the configuration recorder, see Managing the Configuration Recorder in the Amazon Config Developer Guide.

Prerequisites

The home Region for Quick Setup must already be specified before you complete the follow tasks. For information, see Configure the home Amazon Web Services Region.

To set up Amazon Config recording, perform the following tasks in the Amazon Systems Manager console.

To set up Amazon Config recording with Quick Setup
  1. Open the Amazon Systems Manager console at https://console.amazonaws.cn/systems-manager/.

  2. In the navigation pane, choose Quick Setup.

    -or-

    If the Amazon Systems Manager home page opens first, choose the menu icon ( 
    The menu icon
  ) to open the navigation pane, and then choose Quick Setup in the navigation pane.

  3. On the Config Recording card, choose Create.

    Tip

    If you already have one or more configurations in your account, first choose the Library tab or the Create button in the Configurations section to view the cards.

  4. In the Configuration options section, choose the Amazon resource types you want to record and whether you want to include global resources.

  5. Choose the Region you want Amazon Config to use when recording changes made to global resources. The value you specify determines where API calls originate from when Amazon Config gathers information about global resources in your configuration. The Region you choose must be a Region you specify later in Targets.

  6. Create a new Amazon Simple Storage Service (Amazon S3) bucket, or choose an existing bucket you want to send configuration snapshots to.

  7. Choose the notification option you prefer. Amazon Config uses Amazon Simple Notification Service (Amazon SNS) to notify you about important Amazon Config events related to your resources. If you choose the Use existing SNS topics option, you must provide the Amazon Web Services account ID and name of the existing Amazon SNS topic in that account you want to use. If you target multiple Amazon Web Services Regions, the topic names must be identical in each Region.

  8. In the Schedule section, choose how frequently you want Quick Setup to remediate changes made to resources that differ from your configuration. The Default option runs once. If you don't want Quick Setup to remediate changes made to resources that differ from your configuration, choose Disable remediation under Custom.

  9. In the Targets section, choose whether to allow Amazon Config recording for your entire organization, some of your organizational units (OUs), or the account you're logged in to.

    If you choose Entire organization, continue to step 12.

    If you choose Custom, continue to step 11.

  10. In the Target OUs section, select the check boxes of the OUs and Regions where you want to use Amazon Config recording.

  11. Choose Create.