Organization Config (with aggregator) eventbridge rule

I tested in a PoC environment creating an AWS Config and then an eventbridge rule to send the config events (non-compliant) to a cloudwatch log group (and then to firehose to send a vendor) and it works great!. But, I did the same in a config account in the production environment having a config with aggregator in all the accounts and regions and the eventbridge rule it doesn't track anything, it doesn't work.E I need to send all the non-compliant events of the organization. What could be the problem? How do i do it? Thank you.

주제

관리 및 거버넌스 서버리스 애플리케이션 통합

태그

AWS Config 아마존 EventBridge

언어

English

victoria b

질문됨 2년 전504회 조회

2개 답변

최신
최다 투표
가장 많은 댓글

이 답변이 도움이 되었나요?커뮤니티가 여러분의 지식을 활용할 수 있도록 정답을 찬성하세요.

Hello,

this APG pattern is the solution for the exact same thing which you can refer https://apg-library.amazonaws.com/content/9862df6d-3d3d-482d-b122-04198ed691e2

Vijaya Diddi

답변함 2년 전

victoria b
2년 전
Thank you Vijaya. Sadly, I can't access to see that APG pattern. So, you a re saying there is to: Use an Amazon EventBridge rule to trigger notifications when AWS resources are non-compliant from one centralized configuration account with config aggregator in all the accounts and regions of the organization?. If you have another link I would really appreciate it. As I said, I tested with on region in one account and it works. But the problem is with a centralized account. What I need is to send those events to a Log Group. Thank you.

I there any update about this topic?? Unfortunately I've not access to the link :(

aortega

답변함 일 년 전

Organization Config (with aggregator) eventbridge rule

관련 콘텐츠