The hands-on lab is part of these learning paths
Security - Specialty Certification Preparation for AWS
GDPR: Using AWS Compliance Enabling Services
AWS Security Services
AWS Cloud Management Tools
AWS Auditing & Monitoring
AWS Governance & Compliance
DevOps Engineer – Professional Certification Preparation for AWS
Ready for the real environment experience?
AWS Config is a powerful tool in your security and governance toolkit. AWS Config can record and track changes to the configuration of many types of resources in AWS. Config Rules can be used to monitor compliance with your security and governance policies. You can leverage AWS Config managed rules to quickly get started with compliance checking of common policies. You are also able to write custom rules to cover whatever policy you care to enforce. In this lab, you will get hands-on experience with managed and custom AWS Config rules.
Upon completion of this lab you will be able to:
- Configure the configuration recorder to AWS resources
- Track and audit security changes using AWS Config
- Explore the integration between AWS Config and CloudTrail
- Use managed and custom rules to check compliance
- Analyze and correct non-compliant resources
You should be familiar with the following:
- EC2 Security Groups basics
- CloudTrail and AWS Lambda basics will be helpful but not required
September 6th, 2018 - Updated Lab IAM permissions to work with the new AWS Config requirements. Updated instructions and screenshots.
July 30th, 2018 - Updated all instructions and images to match the new AWS Console experience
About the Author
Logan has been involved in software development and research for over eleven years, including six years in the cloud. He is an AWS Certified DevOps Engineer - Professional, MCSE: Cloud Platform and Infrastructure, and Certified Kubernetes Administrator (CKA). He earned his Ph.D. studying design automation and enjoys all things tech.