Skip to main content

Configure AWS Config and enable AWS Config recording for other AWS regions

To configure AWS Config and enable AWS Config recording for other AWS regions, follow these steps:

  1. Copy the topic ARN value.

    1. Use the search bar in the AWS console to look up "Simple Notification Service".

    2. In the left-side menu, click Topics.

    3. From the Topics grid, copy the ARN value of your previously-created topic.

  2. Configure AWS Config and enable AWS Config recording.

    1. Use the search bar in the AWS console to look up "Config".

    2. Select the region from the drop-down menu next to your username.

    3. In the left-side menu, click Set up AWS Config. Do not use the 1-click setup option.

      Note

      This step assumes the AWS Config service was never configured in your current AWS account region. If the AWS Config service is already configured, access the Settings page in the left-side menu. Click Edit, select the Enable recording checkbox and confirm your choice. Next, follow the same steps described below.

    4. In the General Settings section, under Recording strategy, select Record all current and future resource types supported in this region.

      Do not select the Include globally recorded resource types checkbox.

    5. For the AWS Config role field, select the Use an existing AWS Config service-linked role option.

      You can leave the rest of the fields with their default values.

    6. In the Delivery method section, under Amazon S3 bucket, select the Choose a bucket from your account option.

    7. From the S3 Bucket name (required) drop-down menu, select the S3 bucket previously created.

    8. In the Amazon SNS topic section, select the Stream configuration changes and notifications to an Amazon SNS topic checkbox.

    9. Select the Choose a topic by entering a topic ARN option.

    10. In the SNS topic ARN field, enter the ARN value of your topic.

    11. Click Next twice, and then confirm your choice.

To continue the AWS sensor configuration, refer back to Configure the necessary AWS services.Configure the necessary AWS services