Plugin Title Config Service Enabled
Cloud AWS
Category ConfigService
Description Ensures the AWS Config Service is enabled to detect changes to account resources
More Info The AWS Config Service tracks changes to a number of resources in an AWS account and is invaluable in determining how account changes affect other resources and in recovery in the event of an account intrusion or accidental configuration change.
AWS Link
Recommended Action Enable the AWS Config Service for all regions and resources in an account. Ensure that it is properly recording and delivering logs.

Detailed Remediation Steps

Want to scan for this risk automatically?

Get Started Now