The Resource Recorder Is Enabled

Rule Details

Application Scenarios

The resource recorder automatically detects and records changes made to your resources that are supported by Config. With the resource recorder enabled, Config can:

• Notify you using the specified SMN topic if your resources are created, modified, or deleted.
• Notify you using the specified SMN topic if there is a change to resource relationships.
• Store your resource change notifications every 6 hours if you have configured an OBS bucket and an SMN topic.
• Store resource snapshots every 24 hours if you have configured an OBS bucket.

You need to configure the SMN topic and OBS bucket properly to meet audit and data security requirements.

Solution

Modify the SMN topic or OBS bucket configurations of your resource recorder as required. For details, see Modifying the Resource Recorder.

This policy rule is triggered periodically. If you want to check resource compliance in real time, use the tracker-config-check rule.

Rule Logic

• If the targetOBS parameter is configured, but the OBS bucket configured for the resource recorder does not meet the requirements or no OBS bucket is configured, the resource recorder is non-compliant.
• If the targetSMN parameter is configured, but the SMN topic configured for the resource recorder does not meet the requirements or no SMN topic is configured, the resource recorder is non-compliant.
• If none of the preceding occurs, the resource recorder is compliant.