Skip to content
By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post
About re:Post

AWS Config fails to create configuration recorder

0

I am trying to create the AWS Config configuration to match the Security Hub. I assigned what I believed would be the correct permissions based on the guides provided by AWS. When I configure the AWS Config system to match the specifications from AWS Security Hub, I get the following very non specific error.

Configuration recorder creation failed.

Insufficient permissions You do not have sufficient permissions to perform this action.

I realize it is obviously a permissions problem, but unlike most systems and errors, it isn't telling me what permissions I am missing to create the specified item. If anyone knows specifically where I can look to identify what I am missing, please point me in the correct direction.

I attempted the base configuration for AWS Config as well as using the "1 Click Setup" and both failed.

Topics
Management & GovernanceSecurity, Identity, & Compliance
Tags
AWS Security HubAWS Config
Language
English
asked 3 years ago2.5K views
1 Answer
0
Accepted Answer

Hi. Check permissions here: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconfig.html

I think you need: PutConfigurationRecorder permission

answered 3 years ago
EXPERT
reviewed 2 years ago
  • Matt Fahler
    3 years ago

    Thanks for pointing that out. I was using one of the default policies from AWS and mistakenly read the policy thinking that permission was built in. Once I built my own policy containing that and the other required permissions, I was able to get this functioning properly without issue. Thank you.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Relevant content