Ravi Sir's Cards › AWS
Use them together
This revision card explains Use them together. It starts from the need that config without Trail misses actors; Trail without Config misses ongoing drift. It describes trail answers who changed; Config answers what is true now and whether it stays compliant. The how-to section notes alarm on noncompliant rules; protect Trail log bucket; enable log file validation. An example on the card is SG opens 22 , then Config NON_COMPLIANT; Trail shows the IAM user that authorized it.
Read card text
What this card says
Why do we need it?
Config without Trail misses actors; Trail without Config misses ongoing drift.
What is it?
Trail answers who changed; Config answers what is true now and whether it stays compliant.
drift
How to do it
Alarm on noncompliant rules; protect Trail log bucket; enable log file validation.
Example
SG opens 22 → Config NON_COMPLIANT; Trail shows the IAM user that authorized it.