Ravi Sir's Cards › AWS
Config and CloudTrail
This revision card explains Config and CloudTrail. You cannot prove compliance or who changed prod without records. AWS Config records resource state and rules. CloudTrail records API activity (who/what/when). The how-to section covers how to enable multi-region trail + org trail; turn on Config recorder; attach managed rules. “Is encryption on?” , then Config rule.
Read card text
What this card says
Why do we need it?
You cannot prove compliance or who changed prod without records.
What is it?
AWS Config records resource state and rules. CloudTrail records API activity (who/what/when).
Config / CloudTrail
How to do it
Enable multi-region trail + org trail; turn on Config recorder; attach managed rules.
Example
“Who made the bucket public?” → CloudTrail. “Is encryption on?” → Config rule.