Config Explorer
Inventory, relationships and change history from the AWS Config data you already deliver to S3.
[ P ] LATEST POSTS
The resource relationships AWS Config doesn't record
AWS Config records relationships well for some services and barely at all for others. Here is how Config Explorer fills the gaps from ARNs and IDs in each configuration and from CloudFormation stacks, and why every link it infers is labelled.
4 min read →
Why your VPC shows hundreds of AWS Config changes, and how to find the real ones
Open the AWS Config timeline for a busy VPC and you will find hundreds of versions, almost none of which anyone made. Here is where they come from, and how to separate configuration, tag and relationship changes so the real edits stand out.
3 min read →
One inventory for your whole AWS organisation, from the Config bucket you already have
Control Tower already sends AWS Config data from every enrolled account to one bucket. Here is where those files are, what they cost to read, the permissions you need, and how to turn them into a single inventory.
4 min read →
Config Explorer: see what is in your AWS accounts, and how it connects
AWS Config already records every resource in your accounts and every change to it, and delivers the lot to S3. Config Explorer is a Windows app that turns those files into an inventory, a relationship map and a change log you can actually read.
3 min read →