How to disable Configurations History Delivery for account in AWS Config

0

I have configured AWS Config for some of the accounts to notify if there is any public access enabled for the existing or new s3 bucket created, but after enabling aws config I am receiving notification daily, regarding the Configurations History Delivery for account XXXXXXXXXX. How to disable the history delivery I want to reduce the noise to the mail box. Only want to notify if there are any configurations changes related to s3 public access. I can't find any specific option in aws config to disable this.

已提問 2 個月前檢視次數 127 次
1 個回答
0

Hi, from your post I am not sure which method you are currently using to receive these emails.

If you are currently using the default SNS reporting feature in AWS Config (accessible through AWS Config dashboard > Settings > Delivery method), this will send all notifications - https://docs.aws.amazon.com/config/latest/developerguide/notifications-for-AWS-Config.html and can result in a high number of emails being sent.

Alternatively, you can configure alerts for a specific type of change by defining an EventBridge rule to filter on only the type of event that you are interested in. For detecting S3 Public Access changes, I would recommend deploying a Config rule to check for public access (e.g. via https://repost.aws/knowledge-center/flag-buckets-aws-config). You can then define an EventBridge rule to react to changes in the compliance state of this rule, following the steps here: https://repost.aws/knowledge-center/config-resource-non-compliant

If you are already using the EventBridge method, the filter you are using in the EventBridge rule may currently be not specific enough - ensure that you've set the messageType to only react to ComplianceChangeNotification type messages.

AWS
David_R
已回答 2 個月前
profile picture
專家
已審閱 2 個月前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南