Records configuration changes overtime on resources

  • Auditing of changes, compliance with standards
  • Does not prevent changes happening… no protection
  • Regional Service.. Supports cross-region and account aggregation
  • Changes can generate SNS notifications and near-realtime events via EventBridge & Lambda