RecordingGroup
Specifies which resource types Config records for configuration changes. By default, Config records configuration changes for all current and future supported resource types in the Amazon Web Services Region where you have enabled Config, excluding the global IAM resource types: IAM users, groups, roles, and customer managed policies.
In the recording group, you specify whether you want to record all supported current and future supported resource types or to include or exclude specific resources types. For a list of supported resource types, see Supported Resource Types in the Config developer guide.
If you don't want Config to record all current and future supported resource types (excluding the global IAM resource types), use one of the following recording strategies:
Record all current and future resource types with exclusions (
EXCLUSION_BY_RESOURCE_TYPES
), orRecord specific resource types (
INCLUSION_BY_RESOURCE_TYPES
).
If you use the recording strategy to Record all current and future resource types (ALL_SUPPORTED_RESOURCE_TYPES
), you can use the flag includeGlobalResourceTypes
to include the global IAM resource types in your recording.
Aurora global clusters are recorded in all enabled Regions
The AWS::RDS::GlobalCluster
resource type will be recorded in all supported Config Regions where the configuration recorder is enabled.
If you do not want to record AWS::RDS::GlobalCluster
in all enabled Regions, use the EXCLUSION_BY_RESOURCE_TYPES
or INCLUSION_BY_RESOURCE_TYPES
recording strategy.
Types
Properties
Specifies whether Config records configuration changes for all supported resource types, excluding the global IAM resource types.
An object that specifies how Config excludes resource types from being recorded by the configuration recorder.
This option is a bundle which only applies to the global IAM resource types: IAM users, groups, roles, and customer managed policies. These global IAM resource types can only be recorded by Config in Regions where Config was available before February 2022. You cannot be record the global IAM resouce types in Regions supported by Config after February 2022. For a list of those Regions, see Recording Amazon Web Services Resources | Global Resources.
An object that specifies the recording strategy for the configuration recorder.
A comma-separated list that specifies which resource types Config records.