Deploy Amazon Config conformance pack using Quick Setup
A conformance pack is a collection of Amazon Config rules and remediation actions. With Quick Setup, you can deploy a conformance pack as a single entity in an account and an Amazon Web Services Region or across an organization in Amazon Organizations. This helps you manage configuration compliance of your Amazon resources at scale, from policy definition to auditing and aggregated reporting, by using a common framework and packaging model.
To deploy conformance packs, perform the following tasks in the Amazon Systems Manager Quick Setup console.
Note
You must enable Amazon Config recording before deploying this configuration. For more information, see Conformance packs in the Amazon Config Developer Guide.
To deploy conformance packs with Quick Setup
Open the Amazon Systems Manager console at https://console.amazonaws.cn/systems-manager/
. In the navigation pane, choose Quick Setup.
-
On the Conformance Packs card, choose Create.
Tip
If you already have one or more configurations in your account, first choose the Library tab or the Create button in the Configurations section to view the cards.
-
In the Choose conformance packs section, choose the conformance packs you want to deploy.
-
In the Schedule section, choose how frequently you want Quick Setup to remediate changes made to resources that differ from your configuration. The Default option runs once. If you don't want Quick Setup to remediate changes made to resources that differ from your configuration, choose Disabled under Custom.
-
In the Targets section, choose whether to deploy conformance packs to your entire organization, some Amazon Web Services Regions, or the account you're currently logged in to.
If you choose Entire organization, continue to step 8.
If you choose Custom, continue to step 7.
-
In the Target Regions section, select the check boxes of the Regions you want to deploy conformance packs to.
-
Choose Create.