AWS Security Cookbook

There's more...

Let's go through some important concepts related to AWS Config:

• Some of the checks that we can do with AWS config include the following: check if MFA is enabled, check if S3 buckets are not public, databases are encrypted, VPC flow logs are enabled, and so on.
• We can write our own custom rules using AWS Lambdas.
• AWS Config can perform auto-remediation actions for a rule. For example, we can change the configuration of an EC2 instance based on a rule. However, AWS may stop and restart the EC2 instance, so we need to consider possible downtime.
• To configure auto-remediation from the new console, we can go to our rule, click on the Actions dropdown, and select Manage remediation. In the older console, we can do this from the ...