Рет қаралды 629
AWS Config enables you to build custom compliance rules to evaluate your AWS resources against. This helps to control costs and improve security by maintaining visibility and control over your cloud environment. CloudFormation originally introduced a utility called "Guard" which allows you to write policy rules to evaluate CloudFormation templates against. This policy tool has since been incorporated into the AWS Config service as another mechanism of evaluating resource compliance, in addition to custom AWS Lambda functions. In this video, we'll take a look at how to develop and test Guard rules locally, and then add them as custom rules in AWS Config.