AWS Config
AWSManagementContinuous configuration tracking and compliance audit service that records resource configurations, evaluates them against 400+ managed and custom rules, auto-remediates via Systems Manager, and produces conformance packs aligned with CIS, PCI DSS, HIPAA, and NIST
FluffyStack toolsAttributes
- SLA Uptime
- 99.9%
- Multi Account
- Yes
Sub-services (4)
Config Rules
Continuous compliance checks against managed or custom Lambda-backed rules
Conformance Packs
Pre-packaged rulesets for CIS, PCI DSS, HIPAA, NIST, and best practices
Aggregator
Cross-account cross-region resource and compliance visibility
Configuration Recorder
Continuous point-in-time resource configuration snapshots with change streams
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (5)
- AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
- AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
- AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
- China (Beijing) · BeijingAWS China (Sinnet)
- China (Ningxia) · YinchuanAWS China (NWCD)
Commercial regions (33)
Europe (8)
- Europe (Paris)
- Europe (Frankfurt)
- Europe (Ireland)
- Europe (Milan)
- Europe (Spain)
- Europe (Stockholm)
- Europe (Zurich)
- Europe (London)
North America (7)
- Canada West (Calgary)
- Canada (Central)
- Mexico (Central)
- US East (N. Virginia)
- US West (Oregon)
- US East (Ohio)
- US West (N. California)
South America (1)
- South America (São Paulo)
Asia (11)
- Asia Pacific (Hong Kong)
- Asia Pacific (Hyderabad)
- Asia Pacific (Mumbai)
- Asia Pacific (Jakarta)
- Asia Pacific (Osaka)
- Asia Pacific (Tokyo)
- Asia Pacific (Malaysia)
- Asia Pacific (Singapore)
- Asia Pacific (Seoul)
- Asia Pacific (Taipei)
- Asia Pacific (Thailand)
Oceania (2)
- Asia Pacific (Melbourne)
- Asia Pacific (Sydney)
Middle East (3)
- Middle East (Bahrain)
- Israel (Tel Aviv)
- Middle East (UAE)
Africa (1)
- Africa (Cape Town)
Tags
Equivalent services on other platforms
Enforce organisational standards and assess compliance at scale with built-in and custom policy definitions, initiative groupings, remediation tasks, and exemption workflows
Centralised security and risk management platform for GCP with asset inventory, vulnerability scanning, threat detection, compliance reporting, and security posture dashboards