AWS Config Reviews

I use the solution in my company to check the vulnerabilities for all the resources, including tools like S3, EC2 Instances, and to help us with the IP addresses of those attempting to hack into our environment. The tool is useful for checking resources and for vulnerability scanning.

With AWS Config, it is easy to find out which IPs belong to the list of suspicious IP addresses. The tool also helps our company check which resources are affected by threats or attacks in our environment.

We use AWS solutions to host our applications, such as ClearPass and Mac applications, JEMOS, and Microsoft domain controllers. We also host DHCP on AWS.

Installing the instances and performing upgrades is smooth and clean.

It tracks configuration changes across all your AWS resources. Imagine it as a log of every tweak and setting alteration. This lets you build compliant policies based on desired configurations. 

For example, if a server gets exposed publicly, Config flags it as a deviation from your baseline, monitors it, and can even automatically fix it (auto-remediate) for you. That's the main use case, making sure our AWS setup adheres to our security and compliance standards.

The historical analysis is amazing. If a malicious actor changes something in your account, you can go back in time through Config's history, see exactly what was modified, and revert it to a safe point.

Improvements are needed as per customer requirements. 

I have been using AWS Config for the past two years. 

Our primary use case for this solution is identifying data through the resources feature. This solution allows us to track changes on the platform and create a history of changes. Additionally, we use the remediation feature to ensure the safety of our information and track security breaches or exposures.

The tracking, history logs, and security alert features are valuable because they are critical features that assist us.