The AWS Config process

Before moving on to the next section in this chapter, let's just review the AWS Config process:

1. You must first configure elements of AWS Config, which in turn enables the configuration recorder to begin capturing and recording changes within your environment.
2. AWS Config will then actively identify and discover resources based upon your configuration.
3. For any changes, creations, and deletions of supported resources made within your environment where AWS Config is running, a CI will be created.
4. This change will be sent to the notification stream (SNS topic).
5. If you have any Config rules configured for managing compliance, AWS Config will evaluate any changes made to your environment and assess those changes for any non-compliance. If a change of compliance state occurred, a notification will be sent to the notification stream.
6. Should a configuration snapshot be initiated, a point-in-time snapshot of your environment will be captured and the output delivered...