LOW

Ensure AWS Config rules evaluate in near real-time

Config rules should trigger on configuration changes for timely compliance detection.

Security Impact

Periodic evaluation only may delay detection of non-compliant configurations.

How to Remediate

Configure Config rules with ConfigurationChanges trigger mode when supported.

Affected Resources

AWS::Config::ConfigRule

Compliance Frameworks

SOC 2PCI-DSS

How TigerGate Helps

TigerGate continuously monitors your AWS environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all AWS Config resources across your AWS accounts every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
aws-config-15
Service
AWS Config
Category
Compliance
Severity
LOW

Automate This Check

TigerGate automatically scans your AWS environment for this and 575+ other security checks.

Start Free Trial

Related AWS Config Checks

View all checks
aws-config-1high

Ensure AWS Config is enabled in all regions

aws-config-2medium

Ensure AWS Config is recording all resource types

aws-config-3medium

Ensure AWS Config uses S3 bucket with versioning

aws-config-4medium

Ensure AWS Config S3 bucket is encrypted

aws-config-5high

Ensure AWS Config rules are configured for critical controls