How can we monitor the AWS RAM(Resource Access Manager) and Config service, if it is used or unused, if enabled in AWS Organization?

Question

I would like to understand how we can monitor the usage and enablement status of two AWS services, Resource Access Manager (RAM) and AWS Config, specifically within the context of an AWS Organization. RAM allows for resource sharing across accounts, while AWS Config helps with assessing and auditing resource configurations and compliance. My query revolves around determining whether these services are actively being utilized or remain unused within the AWS Organization. Additionally, I'm interested in understanding how we can monitor the status of their enablement across the organization. Could you please guide me on the methods or tools available to monitor RAM and AWS Config usage.

Answer

First you would enable Resource Access Manager via Organizations check [link](https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-ram.html).

Then you can see which resources are being shared [link](https://docs.aws.amazon.com/ram/latest/userguide/working-with-sharing-view-sr.html).

In regards to AWS Config, you can use [AWS Config Aggregator ](https://docs.aws.amazon.com/config/latest/developerguide/aggregate-data.html). As well as the Dashboard view.

[AWS CloudTrail](https://aws.amazon.com/cloudtrail/) being enabled in your AWS Organization will also allow you to see any modifications to your resources.

How can we monitor the AWS RAM(Resource Access Manager) and Config service, if it is used or unused, if enabled in AWS Organization?

관련 콘텐츠