Skip to main content
This lesson shows how to configure AWS Config to build a basic resource inventory for a single AWS region and how to verify that recording is enabled so resources are captured. AWS Config provides a regional view of resource configurations, configuration history, and (optionally) compliance evaluation using managed or custom rules. Quick steps
  1. Open the AWS Console → search for Config → select AWS Config.
  2. If this is your first time in the region, click Get started and follow the three-step setup wizard (Settings → Rules → Review).
  3. Choose recording options, create or confirm a service-linked role, and configure an S3 delivery channel.
  4. Confirm the recorder is running, then open Resources → Resource Inventory to view discovered resources.
Step 1 — Settings Choose how AWS Config records resources in the region. For a comprehensive inventory, select the option to record all supported resource types with the ability to override or exclude specific types later.
A screenshot of the AWS Config setup page in the AWS console showing the "Recording method" step with options to record all resource types or only specific resource types. The left sidebar shows the setup steps and the "All resource types with customizable overrides" option is selected.
Under Default settings, enable Continuous recording to capture configuration changes as they happen. Daily recording is an alternative if you prefer less frequent snapshots, but continuous recording is recommended for near real-time inventory and change tracking.
A screenshot of the AWS Config setup page showing Default settings for recording frequency, with "Continuous recording" selected and "Daily recording" as the alternative option.
Data governance and delivery AWS Config requires a service-linked IAM role so it can read resource configurations and deliver data to your delivery channel (S3). Create or allow AWS to create the AWS Config service-linked role during setup.
A screenshot of the AWS Management Console on the "Set up AWS Config" page. It shows the Data governance section with the IAM role option "Use an existing AWS Config service‑linked role" selected and part of the Delivery channel settings.
Configure the Delivery channel (S3)
  • Specify an S3 bucket where AWS Config will store configuration snapshots and configuration history.
  • You can let the console create a bucket or select an existing one in the same account and region. A common naming convention is Config-<region>.
  • Ensure the bucket exists and has the correct permissions before completing the setup.
Step 2 — Rules (optional) AWS Config can evaluate resource configurations with managed or custom rules. The console provides many AWS Managed Rules for common best-practice checks (e.g., certificates, load balancers). For this basic inventory demo you can skip adding rules; rules are optional and can be added later.
A screenshot of the AWS Management Console on the "Set up AWS Config" page, showing the "Rules" step with an "AWS Managed Rules (731)" list and a search field. The left sidebar shows the setup steps (Settings, Rules, Review).
Step 3 — Review Review your choices (recording method, frequency, IAM role, S3 bucket) and confirm to enable AWS Config for the selected region. After confirmation you will be redirected to the AWS Config dashboard. Verify the recorder is running Open Settings and confirm the customer-managed recorder shows a green “Recording is on” status if continuous recording is enabled. If recording is not enabled, AWS Config will not collect new configuration data.
A screenshot of the AWS Config Settings page showing a customer-managed recorder with a green "Recording is on" status and buttons to Edit or Stop recording. The recording method and default frequency (Continuous) are shown in the lower panel.
View Resource Inventory Go to Resources → Resource Inventory to see recorded resources. The inventory displays resource identifiers, types, and compliance state (if rules are present). Use the provided filters for resource category, resource type, and compliance, and select resources to view details or timelines. Note: Discovery and ingestion of resources may take several minutes (or longer depending on the number of resources) after you enable recording.
Screenshot of the AWS Config console open to the "Resource Inventory" page, showing explanatory text and a "Resources (28+)" section. The UI includes dropdown filters for resource category, resource type, and compliance plus buttons like "View details" and "Resource Timeline."
Configuration summary Verification checklist
  • AWS Config setup completed for the region.
  • Service-linked IAM role created or assigned.
  • Delivery S3 bucket configured and accessible.
  • Recorder status shows Recording is on (customer-managed).
  • Resource Inventory begins populating (allow time for discovery).
Links and references
AWS Config is regional and may require time to discover and record all resources after you enable recording. Confirm the recorder status and check back later if the inventory is incomplete.
That completes this lesson on setting up AWS Config for a basic resource inventory.

Watch Video

Practice Lab