AWS Config is a fully managed service provided by Amazon Web Services (AWS) that enables you to track, audit, and evaluate the configurations of your AWS resources.
It provides a detailed view of your resource inventory, configuration history, and changes over time.
AWS Config helps you ensure compliance with internal policies and regulatory standards, troubleshoot operational issues, and maintain security best practices.
Support of New Resource Types
AWS Config has introduced support for four additional AWS resource types, enhancing its ability to provide comprehensive coverage across your AWS environment. This update allows you to more effectively discover, evaluate, audit, and address issues across a wider array of resources.
If you have enabled recording for all resource types, AWS Config will automatically begin tracking these new additions. The newly supported resource types are also compatible with Config rules and Config aggregators.
You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where these resources are available:
- AWS::EC2::VPCBlockPublicAccessExclusion
- AWS::EC2::VPCBlockPublicAccessOptions
- AWS::S3Express::BucketPolicy
- AWS::S3Express::DirectoryBucket
For a full list of resource types supported by AWS Config, visit the supported resource types page.