Enabling the Resource Recorder

Scenarios

The resource recorder automatically detects and records changes made to your resources that are supported by Config.

If you have enabled the resource recorder and specified an OBS bucket and an SMN topic when you configure the resource recorder, Config will notify you if there is a change (creation, modification, deletion, relationship change) to the resources within the monitoring scope and periodically store your notifications and resource snapshots.

To get full functionality of Config, you need to enable the resource recorder. If the resource recorder is disabled, .

This section describes how to enable and configure the resource recorder.

Procedure

The following steps describe only the mandatory parameters for the resource recorder. Retain the default values for other parameters. For more information about how to configure the resource recorder, see "Configuring the Resource Recorder" in the Config User Guide.

1. Log in to the management console.
2. Click in the upper left corner of the page. In the displayed service list, under Management & Deployment, select Config.
3. In the navigation pane on the left, choose Resource Recorder.
4. Toggle on the resource recorder and in the displayed dialog box, click OK.

   

5. Specify an OBS bucket.

   

   Select an OBS bucket from the current account or another account to store resource change messages and snapshots.

   If there are no OBS buckets in the current account, create one first. For details, see the Object Storage Service User Guide.

6. Configure an SMN topic.

   

   Toggle on the SMN topic, select Your topic, and select a region and an SMN topic.

   If there are no SMN topics available in the current account, create one first. For details, see the Simple Message Notification User Guide.

   

   To send notifications with an SMN topic, you not only need to create the topic, but also add subscriptions and request subscription confirmations. For details, see the Simple Message Notification User Guide.

7. Specify a data retention period.

   

   You can select Seven years (2,557 days) or customize a period.

8. Grant permissions.

   

   Quick granting will automatically create an agency named rms_tracker_agency to grant the required permissions for the resource recorder to work properly. The agency contains permissions for writing data into an OBS bucket.

9. Click Save.
10. In the displayed dialog box, click OK.

Related Information

You can modify or disable the resource recorder at any time.

• When configuring the resource recorder, you can select OBS buckets or SMN topics of other accounts. However, you must first use the other accounts to authorize the current account. For details, see "Configuring the Resource Recorder" > "Cross-Account Authorization" in the Config User Guide.
• If you select Custom granting to customize authorization for the resource recorder, you need to create an agency with IAM, and the agency must include either the permissions for sending notifications using an SMN topic or the permissions for writing data into an OBS bucket based on related configurations. If you want to store resource change messages and resource snapshots in an OBS bucket encrypted using KMS, you will also need the KMS Administrator permission. For details, see "Configuring the Resource Recorder" > "Storing Resource Change Notifications and Resource Snapshots to an Encrypted OBS Bucket" in the Config User Guide. For details about how to create an agency, see Cloud Service Agency.