How to disable Configurations History Delivery for account in AWS Config

0

I have configured AWS Config for some of the accounts to notify if there is any public access enabled for the existing or new s3 bucket created, but after enabling aws config I am receiving notification daily, regarding the Configurations History Delivery for account XXXXXXXXXX. How to disable the history delivery I want to reduce the noise to the mail box. Only want to notify if there are any configurations changes related to s3 public access. I can't find any specific option in aws config to disable this.

質問済み 2ヶ月前127ビュー
1回答
0

Hi, from your post I am not sure which method you are currently using to receive these emails.

If you are currently using the default SNS reporting feature in AWS Config (accessible through AWS Config dashboard > Settings > Delivery method), this will send all notifications - https://docs.aws.amazon.com/config/latest/developerguide/notifications-for-AWS-Config.html and can result in a high number of emails being sent.

Alternatively, you can configure alerts for a specific type of change by defining an EventBridge rule to filter on only the type of event that you are interested in. For detecting S3 Public Access changes, I would recommend deploying a Config rule to check for public access (e.g. via https://repost.aws/knowledge-center/flag-buckets-aws-config). You can then define an EventBridge rule to react to changes in the compliance state of this rule, following the steps here: https://repost.aws/knowledge-center/config-resource-non-compliant

If you are already using the EventBridge method, the filter you are using in the EventBridge rule may currently be not specific enough - ensure that you've set the messageType to only react to ComplianceChangeNotification type messages.

AWS
David_R
回答済み 2ヶ月前
profile picture
エキスパート
レビュー済み 2ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ