Help Center/ Config/ User Guide/ Resource Compliance/ Built-In Policies/ Config/ Resource Recorder Configuration Check
Updated on 2025-08-25 GMT+08:00
View PDF
Share

Resource Recorder Configuration Check

Rule Details

Table 1 Rule details

Parameter

Description

Rule Name

tracker-config-check

Identifier

Resource Recorder Configuration Check

Description

If the resource recorder configuration does not meet the parameter requirements, the resource is non-compliant.

Tag

config

Trigger Type

Configuration change

Filter Type

config.trackers

Rule Parameters

(Optional) targetOBS: OBS bucket to which the resource recorder dumps data

(Optional) targetSMN: SMN topic used by the resource recorder to send notifications

Application Scenarios

The resource recorder automatically detects and records changes made to your resources that are supported by Config. With the resource recorder enabled, Config can:

  • Notify you using the specified SMN topic if your resources are created, modified, or deleted.
  • Notify you using the specified SMN topic if there is a change to resource relationships.
  • Store your resource change notifications every 6 hours if you have configured an OBS bucket and an SMN topic.
  • Store resource snapshots every 24 hours if you have configured an OBS bucket.

You need to configure the SMN topic and OBS bucket properly to meet audit and data security requirements.

Solution

Modify the SMN topic or OBS bucket configurations of your resource recorder as required. For details, see Modifying the Resource Recorder.

Rule Logic

  • If the targetOBS parameter is configured, but the OBS bucket configured for the resource recorder does not meet the requirements or no OBS bucket is configured, the resource recorder is non-compliant.
  • If the targetSMN parameter is configured, but the SMN topic configured for the resource recorder does not meet the requirements or no SMN topic is configured, the resource recorder is non-compliant.
  • If none of the preceding occurs, the resource recorder is compliant.
Parent topic: Config