Skip to content
SPECIFICTION
Get listed

AWS Config

aws.amazon.com

WebAPI
Visit aws.amazon.com
Spec score 7.5 #15 of 26 in Cloud Governance Software

What it is

AWS Config assesses, audits, and evaluates AWS resource configurations through web and API access. It records configuration changes so teams can inspect earlier states through the console, API, or CLI, and it can cover selected third-party resources such as on-premises servers, SaaS monitoring tools, and version control systems. Prebuilt rules and custom AWS Lambda rules evaluate configurations against policies. Conformance packs combine rules with remediation actions and aggregated compliance reporting. Aggregators centralize configuration metadata and rule compliance across accounts and Regions, while advanced queries use a subset of SQL SELECT syntax to search current state. Integrations described for the service include AWS Organizations, CloudTrail, Security Hub CSPM, Audit Manager, Systems Manager, Firewall Manager, EC2 Dedicated Hosts, and Application Load Balancers. Charges are usage-based for recorded configuration items and rule evaluations; related S3, SNS, and Lambda charges may also apply. Rules report status but do not prevent noncompliant changes.

Spec sheet

Purpose
AWS Config assesses, audits, and evaluates the configurations of AWS resources.Read 4 Oct 2026 · aws.amazon.com
Intended users
AWS identifies security and governance teams, administrators in larger organizations, information security experts, compliance users, and infrastructure operators as beneficiaries.Read 4 Oct 2026 · aws.amazon.com
Integrations
The feature page describes integrations with AWS Organizations, CloudTrail, Security Hub CSPM, Audit Manager, Systems Manager, Firewall Manager, EC2 Dedicated Hosts, and Application Load Balancers.Read 4 Oct 2026 · aws.amazon.com
Maker
AWS says Amazon Web Services launched in 2006 and is part of Amazon.Read 4 Oct 2026 · aws.amazon.com
Compliance packs
Conformance packs bundle Config rules and remediation actions for deployment and aggregated compliance reporting across an organization.Read 4 Oct 2026 · aws.amazon.com
Configuration history
It records resource configuration changes and lets users view past configurations through the console, API, or CLI.Read 4 Oct 2026 · aws.amazon.com
Important limitation
Config rules report compliance status but do not guarantee resources remain compliant or prevent users from making noncompliant changes.Read 4 Oct 2026 · aws.amazon.com
ITSM integrations
The AWS Service Management Connector supports tracking AWS resources through ServiceNow and Jira Service Desk.Read 4 Oct 2026 · aws.amazon.com
Multi-account aggregation
Aggregators provide a centralized view of resource configuration metadata and rule compliance across accounts and Regions.Read 4 Oct 2026 · aws.amazon.com
Querying
Advanced queries use a subset of SQL SELECT syntax to search current resource configuration state, including across aggregated accounts and Regions.Read 4 Oct 2026 · aws.amazon.com
Resource coverage
It can record configurations for third-party resources such as on-premises servers, SaaS monitoring tools, and version control systems.Read 4 Oct 2026 · aws.amazon.com
Rule limit
The FAQ states that an AWS account can create up to 150 Config rules by default, with limit increases available by request.Read 4 Oct 2026 · aws.amazon.com
Rules
AWS Config offers prebuilt rules and supports custom rules implemented with AWS Lambda to assess resource configurations against policies.Read 4 Oct 2026 · aws.amazon.com
Security certifications
The features page lists ISO 9001, ISO 27018, PCI DSS, ISO 27001, ISO 27017, and HIPAA under certifications.Read 4 Oct 2026 · aws.amazon.com

Plans and prices

Pay as you go Price not published Usage-based; monthly usage is charged by configuration items recorded, active AWS Config rule evaluations, and conformance pack evaluations. No minimums or upfront commitments · S3, SNS, and Lambda charges may also apply Read 4 Oct 2026 · aws.amazon.com

Every AWS Config plan and price →

Strong points and limits

Strong points

  • Records configuration history for later review
  • Supports prebuilt and Lambda-based custom rules
  • Aggregates compliance across accounts and Regions
  • Offers conformance packs with remediation actions
  • Provides API and web access

Limits

  • Rules do not prevent noncompliant changes
  • Default account limit is 150 Config rules
  • Usage charges vary with recorded evaluations
  • Additional S3, SNS, and Lambda charges may apply

Who it suits

It fits security, governance, compliance, infrastructure, and administrative teams managing AWS configurations across accounts and Regions. It is also suited to organizations using policy-based evaluations and remediation.

Verdict

AWS Config provides configuration history, policy evaluation, aggregation, querying, and integrations for AWS governance work. Readers should account for usage-based billing and the fact that compliance reporting does not itself enforce compliance.

Where Specifiction places it

Alternatives to AWS ConfigAll alternatives →