Overview

Cloud Config is a specialized service that is used to evaluate resources on the cloud. Cloud Config tracks the changes of your resource configurations. This allows you to monitor your resource changes over time. You can use Cloud Config to configure compliance rules for your Alibaba Cloud resources. Cloud Config applies rules to monitor your resources and sends alerts if non-compliant resources are detected. Cloud Config allows you to configure manual or automatic remediation for non-compliant resources to implement compliance audits. Cloud Config includes the resources of different regions into a global resource list, which allows you to view the resources in real-time.

Resource Integration Across Regions

Cloud Config provides a list of resources in different regions and allows you to query these resources.

Configuration Changes Linked to Operations

Creates a snapshot of the configurations for every change and tracks the operation that triggered the change. When an issue occurs, you can easily attribute the issue to a specific change.

Protection Pre-Check Based on the Baseline for Classified Protection of Cybersecurity 2.0

Cloud Config provides rules based on the specifications in the Baseline for Classified Protection of Cybersecurity 2.0 and uses the rules to evaluate the compliance of resources. You can enable the Classified Protection precheck feature with one click.

Features

Configuration Center for Cloud Resources

You can view the detailed resource changes in the Cloud Config console. You can also upload these changes to an Object Storage Service (OSS) bucket for further analysis. View Resources You can view the resources of different regions in a list and query the configuration details of a specified resource. Resource Data You can view the resource changes from the last seven years. Storage Method You can save historical configurations as snapshots to a specified storage space on the cloud.

Continuous Compliance Management of Resources on the Cloud

Automatically evaluates the compliance of your resources based on a rules engine and detects potential or ongoing non-compliant configurations. Cloud Config ensures an automatic compliance audit of your cloud infrastructure. Compliance Rules You can set compliance requirements as compliance rules. Cloud Config can continuously evaluate whether your Alibaba Cloud resources meet these compliance rules. Automatic Remediation You can enable the non-compliance alerting and automatic remediation features to manage the compliance of your cloud resources automatically and continuously. Compliance Check You can use Cloud Config to perform compliance checks based on the specifications in the Baseline for Classified Protection of Cybersecurity 2.0 and CIS security standards.

Cross Account Compliance Management

The integration of Cloud Config and Resource Management enables enterprises to evaluate the compliance of resources that belong to multiple Alibaba Cloud accounts. Compliant Rule Assignment If you create multiple Alibaba Cloud accounts, you can assign compliance rules to all member accounts using a master account. Compliance Statistics You can view the compliance statistics of all member accounts in a centralized manner. CMDB on the Cloud You can ship snapshots of resource changes within all accounts to a storage space.