From 12594a15e3478e0a30e87b804ea4b8c5045921eb Mon Sep 17 00:00:00 2001 From: Michele Cereda Date: Wed, 4 Jun 2025 18:21:26 +0200 Subject: [PATCH] chore(aws): review config service description --- knowledge base/cloud computing/aws/README.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/knowledge base/cloud computing/aws/README.md b/knowledge base/cloud computing/aws/README.md index 3ce6802..47c70a1 100644 --- a/knowledge base/cloud computing/aws/README.md +++ b/knowledge base/cloud computing/aws/README.md @@ -198,20 +198,23 @@ Compliance service for assessing and auditing AWS resources. Provides an inventory of resources.
Records and monitors resource configurations and their changes.
-The data is stored in a bucket (default name `config-bucket-{aws-account-number}`)
-Changes can be streamed to 1 SNS topic for notification purposes.
+Allows for automatic remediation for non-compliant resources by leveraging Systems Manager Automation documents. + +The service's data is stored in an S3 bucket.
+The bucket is named `config-bucket-{aws-account-number}` by default and created upon service's activation. + +The changes logs can be streamed to 1! SNS topic for notification purposes. + Uses _rules_ to evaluate whether the resources configurations comply.
-Rule evaluation is done once every time a configuration changes, or periodically.
+Rule evaluation is done either **once** every time a configuration changes, or **periodically**.
Resources are marked with the evaluation result (_compliant_, _non-compliant_). Custom rules can be used to evaluate for uncommon requirements.
Custom rules leverage lambda functions. -Allows for automatic remediation for non-compliant resources by leveraging Systems Manager Automation documents. - -_Conformance packs_ are set of rules bundled together as a deployable single entity.
+_Conformance packs_ are set of rules bundled together as a deployable, single, immutable entity.
Defined as YAML templates.
-Immutable: users cannot make changes without updating the whole rule package.
+Users cannot make changes without updating the **whole** rule package.
Sample templates for compliance standards and benchmarks are available. ### Detective