By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS Config fails to create configuration recorder

0

I am trying to create the AWS Config configuration to match the Security Hub. I assigned what I believed would be the correct permissions based on the guides provided by AWS. When I configure the AWS Config system to match the specifications from AWS Security Hub, I get the following very non specific error.

Configuration recorder creation failed.

Insufficient permissions You do not have sufficient permissions to perform this action.

I realize it is obviously a permissions problem, but unlike most systems and errors, it isn't telling me what permissions I am missing to create the specified item. If anyone knows specifically where I can look to identify what I am missing, please point me in the correct direction.

I attempted the base configuration for AWS Config as well as using the "1 Click Setup" and both failed.

Topics
Security, Identity, & ComplianceManagement & Governance
Tags
AWS Security HubAWS Config
Language
English
Matt Fahler
asked 9 months ago812 views
1 Answer
0
Accepted Answer

Hi. Check permissions here: https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsconfig.html

I think you need: PutConfigurationRecorder permission

profile picture
myronix88
answered 9 months ago
profile picture
EXPERT
Gary Mclean
reviewed a month ago
  • Matt Fahler
    9 months ago

    Thanks for pointing that out. I was using one of the default policies from AWS and mistakenly read the policy thinking that permission was built in. Once I built my own policy containing that and the other required permissions, I was able to get this functioning properly without issue. Thank you.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content