View a markdown version of this page

Amazon Config recording for Cloud Connectors - Amazon Systems Manager
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon Config recording for Cloud Connectors

When you create a Cloud Connector, you choose whether Amazon Config records the connector's resources in your cloud provider. Recording is on by default. You can't turn it on or off after you create the connector.

Record with Amazon Config

The Cloud Connector is linked to an Amazon Config connector, and Amazon Config records the connector's resources. The setup also creates the resources that Amazon Config uses to receive resource change events from your cloud provider. When a new VM is created, Systems Manager can onboard it as soon as the change event arrives.

Don't record

The Cloud Connector has no Amazon Config connector, and Amazon Config doesn't record the connector's resources. The setup creates only the resources that Systems Manager needs. If you enable VM onboarding, new VMs get SSM Agent at the next scheduled run of the onboarding association.

To check a connector's setting in the Amazon Web Services Management Console, see the Amazon Config recording field on the connector details page or the Amazon Config recording column on the Cloud connectors tab. In the Amazon CLI, the get-cloud-connector output includes a ConfigConnectorArn only for a connector that records with Amazon Config. To create a connector without Amazon Config recording in the Amazon CLI, omit --config-connector-arn from create-cloud-connector.

If you change the Recording setting after you run the console's setup script, the resources that the earlier run created for Amazon Config stay in your cloud provider. The setup topic for your cloud provider lists them.

For information about how to set up a Cloud Connector, see the following topics: