TrustRadius: an HG Insights company

AWS Config Reviews and Ratings

Rating: 7 out of 10
Score
7 out of 10

Reviews

6 Reviews

AWS Config is perfect for cloud governance

Rating: 9 out of 10
Incentivized

Use Cases and Deployment Scope

We use AWS Config to keep track of all changes to our resources by invoking the Describe or API calls. It helps us to provide a detailed view of the resources associated with our AWS account.

Pros

  • A detailed view of the resources associated within the account
  • How resources are configured
  • Enables us to assess, audit, and evaluate the configurations of our AWS resources

Cons

  • Sometime the app is slow
  • Cost is factor when there are multiple accounts associated

Likelihood to Recommend

AWS Config is easy to use and set up in the environment. AWS C onfig helps in scenario where you need to be compliant and by integrating with a ticketing system all users will be notified if they are non-compliant.

Vetted Review
AWS Config
2 years of experience

If you have AWS workload, definitely use AWS config for compliance monitoring

Rating: 9 out of 10
Incentivized

Use Cases and Deployment Scope

Having migrated to the AWS cloud over the last year and a half, we started with AWS from the beginning. It is great to check if your implemented resources align with what you want and/or AWS best practices and to keep a history of all the configuration changes. Both are very helpful for any compliance question you might encounter.

Pros

  • Great to track config changes and helpful for troubleshooting.
  • Great for compliance questions you might get.

Cons

  • It's only AWS, no third party.
  • Not the most intuitive interface, but with a little getting used to it is OK.

Likelihood to Recommend

To keep track of changes and to answer many compliance issues this is a life-saver. AWS does a good job providing tools like this. Any AWS workload should be monitored with AWS Config. It even is great for troubleshooting and seeing who changed what at what time.

Vetted Review
AWS Config
3 years of experience

AWS Config - Enforce, Evaluate, Remediate

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

We use AWS Config to ensure our resources on AWS adhere to AWS best practices. It is used to assess and evaluate your AWS services and their configuration. There is also the option for automatic remediation when a service is found to be breaching a rule. AWS Config is a great tool for [the] governance of your AWS accounts.

Pros

  • The ability to track changes in AWS is paramount, AWS config allows you to do this
  • Allows the auditing of an AWS account
  • Can view history of an account that has AWS config enabled

Cons

  • Vendor [lock-in] as this is only available on AWS
  • [The] interface is dated and is [in] need of updating by AWS
  • Graphing is [...] not the easiest to configure

Likelihood to Recommend

The specific situation we find it useful to use AWS Config is to apply config rules to enforce certain audit requirements, from ISO 9001/27001 for example. This means we know that no resources can be created that will breach these audit requirements. However, as the [number] of rules start to grow it can become cumbersome to manage.

Vetted Review
AWS Config
2 years of experience

AWS Config is the only one you need for your AWS infrastructure monitoring

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

We use AWS config to set a ground rule of our AWS configuration and resources. Since we are using AWS S3 for a lot of our critical resources, AWS config makes it easy for us to evaluate the configuration of those resources as well as tracking the configuration history to see whenever any configuration changes cause an issue to our service.

Pros

  • Track many AWS server configuration
  • Faster and easier audit process of your AWS services configuration
  • Keeping history of changes means its easy to spot any issues that occur whenever any changes happened

Cons

  • The interface is not really user friendly and the configuration option is not easy to use either
  • Only available for resources within AWS
  • Some service can be quite costly, we need to prioritise which service that we would apply AWS config to and leave the less important service without AWS config monitoring

Likelihood to Recommend

It's really good if your infrastructure services is all in AWS, that means everything could be audited and monitored using AWS config. You also can create alarms to notify you or your team about any changes on your AWS resources which is very useful to prevent abuse if you have a fairly large team. It's also very useful whenever some third party wants to audit your AWS resources, if you have a fairly comprehensive AWS config configured, the auditing process will be easy since they only need to look at your AWS config setup.

Vetted Review
AWS Config
1 year of experience

AWS Config - ideal for AWS workloads

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

AWS Config allows us to monitor our configuration of AWS resources, whether that be configuration history so we can view any changes which might have caused an issue; or if we want to be able to replicate workloads in a previous configuration.

This also allows us to save all our configurations within an S3 bucket.

We get alerts on some workloads via SNS when applicable.

Pros

  • We are able to use AWS config to track changes within our environments.
  • We use AWS Config across multiple accounts (environment segregation) whilst maintaining a central (fully backed up because stores in S3 managed repository.

Cons

  • Vendor lock-in, no easy migration path for example if you want to move some workloads to Azure, you'd not be able to lift and shift.
  • Only at an AWS resource perspective - cannot do desired state configuration at an OS level (which makes sense but be good if you could even as a separate feature within AWS Config).

Likelihood to Recommend

Ideal for compliance monitoring - so providing easy visibility on what volumes aren't encrypted, S3 buckets requests only come from HTTPS sites, RDS is encrypted at rest by default.

There are lots of useful scenarios whereby we use this. Other examples [of how] we use AWS Config include Redshift cluster configuration check, cloud trial is enabled.

Vetted Review
AWS Config
2 years of experience

AWS Config for all governance and audit needs

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

AWS Config is used to assess, audit, and evaluate the configuration of your AWS resources. It is implemented in many applications that use AWS to deploy. It helps in assessment, operational auditing and general governance of AWS resources.

Pros

  • It can help you define rules for provisioning and configuring of your AWS. We use it for this purpose.
  • It maintains configuration history. So you can use the AWS Management Console, API, or CLI to obtain details of past configurations
  • It gives you a configuration snapshot of all of your AWS resources and you can store it in AWS S3.
  • You can integrate it with AWS CloudTrail to correlate configuration changes to particular events in your account.

Cons

  • Dashboarding and graphs should be better and more configurable.
  • Some time the Config Rules are difficult to understand and configure. They could be made easy or have GUI to configure them. I know it is difficult to build but that would be a good win.

Likelihood to Recommend

If you have multiple resources in your AWS environment then AWS Config can provide you with audit, governance, and comparison of any changes to your resource configuration over time. You can create alerts to be notified via AWS SNS if any configuration changes, which is very useful for development teams. Governance in an organization, like “Who made the change?”, “From what IP address?” is a very useful audit and operational governance tool.

Vetted Review
AWS Config
2 years of experience