AWS Config

2024/01/04 - 12 updated api methods

Changes   Updated ResourceType enum with new resource types onboarded by AWS Config in November and December 2023.

2023/11/27 - 6 updated api methods

Changes   Support Periodic Recording for Configuration Recorder

2023/11/03 - 12 updated api methods

Changes   Updated ResourceType enum with new resource types onboarded by AWS Config in October 2023.

2023/10/12 - 12 updated api methods

Changes   Add enums for resource types supported by Config

2023/08/11 - 12 updated api methods

Changes   Updated ResourceType enum with new resource types onboarded by AWS Config in July 2023.

2023/06/20 - 12 updated api methods

Changes   Updated ResourceType enum with new resource types onboarded by AWS Config in May 2023.

2023/05/31 - 2 updated api methods

Changes   Resource Types Exclusion feature launch by AWS Config

2023/05/04 - 12 updated api methods

Changes   Updated ResourceType enum with new resource types onboarded by AWS Config in April 2023.

2023/04/05 - 12 updated api methods

Changes   This release adds resourceType enums for types released in March 2023.

2023/03/17 - 12 updated api methods

Changes   This release adds resourceType enums for types released from October 2022 through February 2023.

2022/11/29 - 3 new 6 updated api methods

Changes   With this release, you can use AWS Config to evaluate your resources for compliance with Config rules before they are created or updated. Using Config rules in proactive mode enables you to test and build compliant resource templates or check resource configurations at the time they are provisioned.

2022/10/19 - 12 updated api methods

Changes   This release adds resourceType enums for AppConfig, AppSync, DataSync, EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.

2022/08/24 - 2 updated api methods

Changes   AWS Config now supports ConformancePackTemplate documents in SSM Docs for the deployment and update of conformance packs.

2022/08/04 - 12 updated api methods

Changes   Add resourceType enums for Athena, GlobalAccelerator, Detective and EC2 types

2022/07/27 - 1 new api methods

Changes   This release adds ListConformancePackComplianceScores API to support the new compliance score feature, which provides a percentage of the number of compliant rule-resource combinations in a conformance pack compared to the number of total possible rule-resource combinations in the conformance pack.

2022/07/14 - 12 updated api methods

Changes   Update ResourceType enum with values for Route53Resolver, Batch, DMS, Workspaces, Stepfunctions, SageMaker, ElasticLoadBalancingV2, MSK types

2022/04/06 - 12 updated api methods

Changes   Add resourceType enums for AWS::EMR::SecurityConfiguration and AWS::SageMaker::CodeRepository

2022/03/24 - 2 new 17 updated api methods

Changes   Added new APIs GetCustomRulePolicy and GetOrganizationCustomRulePolicy, and updated existing APIs PutConfigRule, DescribeConfigRule, DescribeConfigRuleEvaluationStatus, PutOrganizationConfigRule, DescribeConfigRule to support a new feature for building AWS Config rules with AWS CloudFormation Guard

2022/03/14 - 12 updated api methods

Changes   Add resourceType enums for AWS::ECR::PublicRepository and AWS::EC2::LaunchTemplate

2022/01/14 - 12 updated api methods

Changes   Update ResourceType enum with values for CodeDeploy, EC2 and Kinesis resources

2021/10/13 - 12 updated api methods

Changes   Adding Config support for AWS::OpenSearch::Domain

2021/08/16 - 12 updated api methods

Changes   Update ResourceType enum with values for Backup Plan, Selection, Vault, RecoveryPoint; ECS Cluster, Service, TaskDefinition; EFS AccessPoint, FileSystem; EKS Cluster; ECR Repository resources

2021/03/30 - 2 new 13 updated api methods

Changes   Adding new APIs to support ConformancePack Compliance CI in Aggregators

2021/02/17 - 3 updated api methods

Changes   Added INSUFFICIENT_DATA in ConformancePackComplianceType.

2021/02/15 - 2 updated api methods

Changes   Added option to provide KMS key to AWS Config DeliveryChannel

2020/12/21 - 4 new 12 updated api methods

Changes   AWS Config adds support to save advanced queries. New API operations - GetStoredQuery, PutStoredQuery, ListStoredQueries, DeleteStoredQuery

2020/12/17 - 1 new api methods

Changes   Adding PutExternalEvaluation API which grants permission to deliver evaluation result to AWS Config

2020/07/23 - 14 updated api methods

Changes   Adding service linked configuration aggregation support along with new enums for config resource coverage

2020/02/28 - 1 new 13 updated api methods

Changes   Accepts a structured query language (SQL) SELECT command and an aggregator name, performs the corresponding search on resources aggregated by the aggregator, and returns resource configurations matching the properties.

2019/11/21 - 2 new api methods

Changes   AWS Config launches Custom Configuration Items. A new feature which allows customers to publish resource configuration for third-party resources, custom, or on-premises servers.

2019/11/19 - 12 new api methods

Changes   AWSConfig launches support for conformance packs. A conformance pack is a new resource type that allows you to package a collection of Config rules and remediation actions into a single entity. You can create and deploy conformance packs into your account or across all accounts in your organization

2019/09/05 - 3 new 14 updated api methods

Changes   AWS Config now includes the option for marking RemediationConfigurations as automatic, removing the need to call the StartRemediationExecution API. Manual control over resource execution rate is also included, and RemediationConfigurations are now ARN addressable. Exceptions to exclude account resources from being remediated can be configured with the new PutRemediationExceptions, DescribeRemediationExceptions, and DeleteRemediationExceptions APIs.

2019/07/17 - 2 updated api methods

Changes   This release adds more granularity to the status of an OrganizationConfigRule by adding a new status. It also adds an exception when organization access is denied.

2019/07/09 - 5 new api methods

Changes   AWS Config now supports a new set of APIs to manage AWS Config rules across your organization in AWS Organizations. Using this capability, you can centrally create, update, and delete AWS Config rules across all accounts in your organization. This capability is particularly useful if you have a need to deploy a common set of AWS Config rules across all accounts. You can also specify accounts where AWS Config rules should not be created. In addition, you can use these APIs from the master account in AWS Organizations to enforce governance by ensuring that the underlying AWS Config rules are not modifiable by your organization member accounts.These APIs work for both managed and custom AWS Config rules. For more information, see Enabling AWS Config Rules Across all Accounts in Your Organization in the AWS Config Developer Guide.The new APIs are available in all commercial AWS Regions where AWS Config and AWS Organizations are supported. For the full list of supported Regions, see AWS Regions and Endpoints in the AWS General Reference. To learn more about AWS Config, visit the AWS Config webpage. To learn more about AWS Organizations, visit the AWS Organizations webpage.

2019/05/06 - 3 updated api methods

Changes   AWS Config now supports tagging on PutConfigRule, PutConfigurationAggregator and PutAggregationAuthorization APIs.

2019/03/19 - 1 new api methods

Changes   AWS Config adds a new API called SelectResourceConfig to run advanced queries based on resource configuration properties.

2019/03/14 - 3 new api methods

Changes   AWS Config - add ability to tag, untag and list tags for ConfigRule, ConfigurationAggregator and AggregationAuthorization resource types. Tags can be used for various scenarios including tag based authorization.

2019/03/13 - 5 new api methods

Changes   Config released Remediation APIs allowing Remediation of Config Rules

2018/11/20 - 4 new api methods

Changes   In this release, AWS Config adds support for aggregating the configuration data of AWS resources into multi-account and multi-region aggregators. AWS Config adds four APIs to query and retrieve aggregated resource configurations. 1) BatchGetAggregateResourceConfig, returns the current configuration items for resources that are present in your AWS Config aggregator. 2) GetAggregateDiscoveredResourceCounts, returns the resource counts across accounts and regions that are present in your AWS Config aggregator. 3) GetAggregateResourceConfig, returns current configuration item that is aggregated for your specific resource in a specific source account and region. 4) ListAggregateDiscoveredResources, accepts a resource type and returns a list of resource identifiers that are aggregated for a specific resource type across accounts and regions.

2018/10/31 - 6 updated api methods

Changes   With this release, AWS Config updated the ResourceType values. The updated list includes AWS Systems Manager AssociationCompliance and PatchCompliance, AWS Shield regional Protection, AWS Config ResourceCompliance, and AWS CodePipeline Pipeline.

2018/09/07 - 2 updated api methods

Changes   Adding a new field "createdBy" to the ConfigRule data model. The field is populated only if the rule is service linked i.e the rule is created by a service. The field is empty for normal rules created by customer.

2018/05/25 - 3 new api methods

Changes   AWS Config adds support for retention period, allowing you to specify a retention period for your AWS Config configuration items.

2018/05/15 - 6 updated api methods

Changes   Update ResourceType enum with values for XRay resource

2018/05/03 - 6 updated api methods

Changes   Update ResourceType enum with values for Lambda, ElasticBeanstalk, WAF and ElasticLoadBalancing resources

2018/04/04 - 12 new api methods

Changes   AWS Config introduces multi-account multi-region data aggregation features. Customers can create an aggregator (a new resource type) in AWS Config that collects AWS Config data from multiple source accounts and regions into an aggregator account. Customers can aggregate data from individual account(s) or an organization and multiple regions. In this release, AWS Config adds several API's for multi-account multi-region data aggregation.

2018/03/20 - 1 new api methods

Changes   AWS Config adds support for BatchGetResourceConfig API, allowing you to batch-retrieve the current state of one or more of your resources.

2018/02/19 - 1 updated api methods

Changes   With this release, AWS Config updated the ConfigurationItemStatus enum values. The values prior to this update did not represent appropriate values returned by GetResourceConfigHistory. You must update your code to enumerate the new enum values so this is a breaking change. To map old properties to new properties, use the following descriptions: New discovered resource - Old property: Discovered, New property: ResourceDiscovered. Updated resource - Old property: Ok, New property: OK. Deleted resource - Old property: Deleted, New property: ResourceDeleted or ResourceDeletedNotRecorded. Not-recorded resource - Old property: N/A, New property: ResourceNotRecorded or ResourceDeletedNotRecorded.

2017/12/20 - 5 updated api methods

Changes   Update ResourceType enum with values for WAF, WAFRegional, and CloudFront resources

2017/10/24 - 5 updated api methods

Changes   AWS Config support for CodeBuild Project resource type

2017/10/06 - 1 updated api methods

Changes   Added missing enumeration values for ConfigurationItemStatus

2017/09/22 - 5 updated api methods

Changes   AWS Config support for DynamoDB tables and Auto Scaling resource types

2017/08/01 - 1 new 4 updated api methods

Changes   Added new API, GetDiscoveredResourceCounts, which returns the resource types, the number of each resource type, and the total number of resources that AWS Config is recording in the given region for your AWS account.

2017/06/13 - 4 updated api methods

Changes   With this release AWS Config supports the Amazon CloudWatch alarm resource type.

2017/02/16 - 1 updated api methods

Changes   AWS Config now supports a new test mode for the PutEvaluations API. Set the TestMode parameter to true in your custom rule to verify whether your AWS Lambda function will deliver evaluation results to AWS Config. No updates occur to your existing evaluations, and evaluation results are not sent to AWS Config.

2017/01/04 - 2 updated api methods

Changes   Updates putConfigRule to support using/writing rules based on the OversizedConfigurationItemChangeNotification message type.

2016/12/06 - 5 updated api methods

Changes   Increases the number of config rules for all accounts from 25 to 50.

2016/07/21 - 2 new 6 updated api methods

Changes   Adds support for RDS and ACM resources types and introduces two new APIs: DeleteEvaluationResults and StartConfigRulesEvaluation. Updated PutConfigRule API can now create Config rules that are triggered by both configuration changes and periodicity.