Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
AWS Config is a service that allows for the assessment, auditing, and evaluation of the configurations of AWS resources. By continuously monitoring and documenting these configurations, Config facilitates the automation of evaluating recorded settings against desired benchmarks. Users can examine changes in configurations and the interrelationships between AWS resources, explore comprehensive histories of resource configurations, and assess compliance with their internal standards. This functionality streamlines processes related to compliance auditing, security evaluations, change management, and operational issue resolution. Furthermore, AWS Config serves as a key resource for conducting configuration audits and compliance checks for both AWS and external resources. Additionally, it allows for the integration and publication of configurations from third-party resources, including GitHub repositories, Microsoft Active Directory, or any on-premises servers, thereby enhancing the breadth of compliance oversight. Overall, the versatility and capabilities of AWS Config make it an essential tool for managing resource configurations effectively.
Description
Automated security measures for AWS provide a hands-free approach to gaining insights and implementing remediation for AWS infrastructure. It is crucial to ensure that AWS Config is enabled across all regions to maintain oversight. Additionally, measures should be taken to identify and halt public access to S3 buckets, whether through read, write, or full control permissions. Automatic enforcement of encryption for S3 objects and volumes is also essential. Furthermore, blocking login attempts from unauthorized IP addresses can enhance security. Non-compliant development resources must be curtailed, and it is advisable to remove any unused elastic load balancers. Implementing an IP restriction policy on AWS resources should be done automatically to reinforce security. Newly created internet-facing Elastic Load Balancers (ELBs) should be deleted unless they align with security protocols. Ports should only remain open in accordance with established policies. For RDS, it is necessary to terminate any unencrypted instances that are publicly accessible. Continuous monitoring and remediation against over a hundred rules are vital, ensuring compliance with AWS CIS benchmarks and adherence to best practices in AWS management. This comprehensive approach ensures a robust security posture for your cloud environment.
API Access
Has API
API Access
Has API
Integrations
AWS App Mesh
AWS CloudTrail
AWS Config
Alert Logic
Amazon GuardDuty
Amazon Macie
Amazon Web Services (AWS)
Anstrex
BOSCO
Bitcanopy
Integrations
AWS App Mesh
AWS CloudTrail
AWS Config
Alert Logic
Amazon GuardDuty
Amazon Macie
Amazon Web Services (AWS)
Anstrex
BOSCO
Bitcanopy
Pricing Details
$0.001 per rule evaluation
Free Trial
Free Version
Pricing Details
$75 per month
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Amazon
Founded
1994
Country
United States
Website
aws.amazon.com/config/
Vendor Details
Company Name
Bitcanopy
Founded
2016
Country
United States
Website
www.bitcanopy.com
Product Features
Configuration Management
Access Control / Permissions
Application Deployment
Automated Provisioning
Infrastructure Automation
Node Management
Orchestration
Reporting Analytics / Visualization
Task Management
Product Features
Cloud Management
Access Control
Billing & Provisioning
Capacity Analytics
Cost Management
Demand Monitoring
Multi-Cloud Management
Performance Analytics
SLA Management
Supply Monitoring
Workflow Approval
Cloud Security
Antivirus
Application Security
Behavioral Analytics
Encryption
Endpoint Management
Incident Management
Intrusion Detection System
Threat Intelligence
Two-Factor Authentication
Vulnerability Management