AWS Config is a fully managed service that provides you with an inventory of your AWS resources, lets you audit resource configuration history, and notifies you of when the resource configuration of your resources changes. AWS Config continuously records changes to configuration attributes of your AWS resources, such as the value of tags on Amazon EC2 instances, ingress/egress rules of security groups, and Network ACL rules for Amazon VPCs. With AWS Config you can discover existing AWS resources, export a complete inventory of your AWS resources with all configuration details, and determine how a resource was configured at any point in time. These capabilities enable security analysis, resource change tracking, compliance auditing, and troubleshooting.