Prevent AWS Config From Recording Based on Tag

0

Hello,

I'm trying to prevent AWS Config from recording resources with a specific tag in my organization. The end result I'm looking for is that I have EC2 instances, DynamoDB tables, etc with a tag "awsconfig" and a value of "disable" and these are not recorded in AWS config.

I have found that you can configure the recorder to not record specific resources, however that wouldn't work since I have resources that I do want to capture that are the same type of resources I don't want to capture.

Additionally I have found the AWS RDK which is cool, but acts on rules and has no effect on recording of resources. I also have found this question but it seems geared towards still recording the resources, just not having a rule run against them.

Is what I'm looking to do possible or am I out of luck?

Thanks

질문됨 일 년 전238회 조회
1개 답변
0

Have you tried applying that restriction in the AWS Config Role you are using for your recorder?

AWS
vtjean
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인