AWS config documentation change
Summary
Formatting changes and clarifications about resource recording behavior for non-recorded resources
Security assessment
Technical documentation improvements about AWS Config recording mechanics. No security implications identified in the changes
Diff
diff --git a/config/latest/developerguide/select-resources.md b/config/latest/developerguide/select-resources.md index d19d8899f..35ca69af4 100644 --- a//config/latest/developerguide/select-resources.md +++ b//config/latest/developerguide/select-resources.md @@ -207 +207,3 @@ If a resource is not recorded, AWS Config captures only the creation and deletio -###### Note +The relationship information that AWS Config provides for recorded resources is not limited because of missing data for non-recorded resources. If a recorded resource is related to a non-recorded resource, that relationship is provided in the details page of the recorded resource. + +**IAM resource type considerations** @@ -211 +213 @@ The `AWS::IAM::User`, `AWS::IAM::Policy`,` AWS::IAM::Group`, `AWS::IAM::Role` re -###### Note +**CI recording schedule for non-recorded resources** @@ -213 +215 @@ The `AWS::IAM::User`, `AWS::IAM::Policy`,` AWS::IAM::Group`, `AWS::IAM::Role` re -The configuration items (CIs) for `ResourceNotRecorded` and `ResourceDeletedNotRecorded` do not follow the typical recording time for resource types. These resource types are only recorded during the periodic baselining process for the customer managed configuration recorder , which is at a less frequent cadance than that for the other resource types. +The configuration items (CIs) for `ResourceNotRecorded` and `ResourceDeletedNotRecorded` do not follow the typical recording time for resource types. These resource types are only recorded during the periodic baselining process for the customer managed configuration recorder, which is at a less frequent cadance than that for the other resource types. This means that create and delete notifications are not sent upon creation or deletion, but during the baselining process. @@ -215 +217 @@ The configuration items (CIs) for `ResourceNotRecorded` and `ResourceDeletedNotR -###### Note +**CI delivery and service-linked recorder scope** @@ -219,2 +220,0 @@ For service-linked configuration recorders, the recording scope determines if yo -The relationship information that AWS Config provides for recorded resources is not limited because of missing data for non-recorded resources. If a recorded resource is related to a non-recorded resource, that relationship is provided in the details page of the recorded resource. -