Prevent AWS Config From Recording Based on Tag

0

Hello,

I'm trying to prevent AWS Config from recording resources with a specific tag in my organization. The end result I'm looking for is that I have EC2 instances, DynamoDB tables, etc with a tag "awsconfig" and a value of "disable" and these are not recorded in AWS config.

I have found that you can configure the recorder to not record specific resources, however that wouldn't work since I have resources that I do want to capture that are the same type of resources I don't want to capture.

Additionally I have found the AWS RDK which is cool, but acts on rules and has no effect on recording of resources. I also have found this question but it seems geared towards still recording the resources, just not having a rule run against them.

Is what I'm looking to do possible or am I out of luck?

Thanks

posta un anno fa238 visualizzazioni
1 Risposta
0

Have you tried applying that restriction in the AWS Config Role you are using for your recorder?

AWS
vtjean
con risposta un anno fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande