Introduction

Overview

Config evaluates whether your resources meet compliance requirements. It also allows you to remediate non-compliant resources with an RFS template or FunctionGraph function.

Constraints

• Currently, you can only add remediation actions to rules created based on built-in and custom policies. Organization rules and rules in a conformance package are not supported.
• When you use a private template of RFS to create a stack, you need to ensure that you have at least five stack quotas.
• You can only add one remediation action to each rule.
• To delete a rule, you need to delete the remediation action assigned to it and disable the rule.
• You can select up to 100 resources as remediation exceptions for each rule, but there is no limitation on how many resources the system will automatically add as remediation exceptions based on the remediation retry rules.

Changes are not synchronized in real time. Remediated resources cannot be evaluated immediately and may still be considered non-compliant. Resources available for the resource recorder will be evaluated within 24 hours after remediation, and the evaluation result of these resources will be updated.

If a resource is in the Processing state, it has been remediated using the private template of RFS or the FunctionGraph function. You can go to the console of the service that manages the resource to check whether the resource is properly configured.