How to disable Configurations History Delivery for account in AWS Config

0

I have configured AWS Config for some of the accounts to notify if there is any public access enabled for the existing or new s3 bucket created, but after enabling aws config I am receiving notification daily, regarding the Configurations History Delivery for account XXXXXXXXXX. How to disable the history delivery I want to reduce the noise to the mail box. Only want to notify if there are any configurations changes related to s3 public access. I can't find any specific option in aws config to disable this.

已提问 1 个月前127 查看次数
1 回答
0

Hi, from your post I am not sure which method you are currently using to receive these emails.

If you are currently using the default SNS reporting feature in AWS Config (accessible through AWS Config dashboard > Settings > Delivery method), this will send all notifications - https://docs.aws.amazon.com/config/latest/developerguide/notifications-for-AWS-Config.html and can result in a high number of emails being sent.

Alternatively, you can configure alerts for a specific type of change by defining an EventBridge rule to filter on only the type of event that you are interested in. For detecting S3 Public Access changes, I would recommend deploying a Config rule to check for public access (e.g. via https://repost.aws/knowledge-center/flag-buckets-aws-config). You can then define an EventBridge rule to react to changes in the compliance state of this rule, following the steps here: https://repost.aws/knowledge-center/config-resource-non-compliant

If you are already using the EventBridge method, the filter you are using in the EventBridge rule may currently be not specific enough - ensure that you've set the messageType to only react to ComplianceChangeNotification type messages.

AWS
David_R
已回答 1 个月前
profile picture
专家
已审核 1 个月前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则