Menu
AWS Config
Developer Guide

Viewing Configuration Details in the AWS Config Console

When you look up resources on the Resource inventory page, you can choose the Config timeline 
                AWS Config timeline icon
            to view the resource's details page. The details page provides information about the configuration, relationships, and number of changes made to that resource.

The blocks at the top of the page are collectively called the timeline. The timeline shows the date and the time that the recording was made.


                    View the configuration details, relationships, and changes to resource
                        types in the AWS Config console.

Details page features

  1. Click to scroll the timeline to an earlier point in the resource's configuration history.

  2. Click a timeline block to select that time period. The descriptions in the Configuration Details, Relationships, and Changes sections comprise the configuration item of the selected resource at the selected time period.

  3. Shows the latest configuration change.

  4. Click to return the timeline to the current time.

  5. Click to view a configuration item by specifying a date (and, if needed, time) and then choose Apply.

  6. Click to navigate to the Changes section. The number that follows Changes is the number of configuration changes that occurred for the resource between the selected time period and the previous block.

  7. Click to navigate to the CloudTrail events section. The number that follows Events is the number of API events that occurred for the resource between the selected time period and the previous block. You can see the API events that AWS CloudTrail logged for the last 7 days. CloudTrail events that occurred prior to the last 7 days can't be viewed in the timeline.

    For more information, see Viewing Events with CloudTrail API Activity History in the AWS CloudTrail User Guide.

Note

CloudTrail events may not be available for the following reasons:

  • Verify that you have sufficient read permissions for CloudTrail. For more information, see Example read-only permission.

  • There is a service issue and CloudTrail events can't be displayed at this time. Try refreshing the page.

  • You don't have a CloudTrail trail in this region or your trail is not enabled for logging. For more information, see Creating a Trail for the First Time in the AWS CloudTrail User Guide.

Timeline navigation tips for the selected resource

The following are tips for using the timeline to view information about the selected resource.

  • Use the arrows at either end of the timeline to view the timeline blocks for configuration items that were recorded in other time periods.

  • Choose Configuration Details to view the description of the selected resource.

  • Choose Relationships to see a list of supported resources in the account that are related to the selected resource. If the Relationships section doesn't expand, the selected resource was not related to another resource that was in your account during the selected time period.

    For more information, see Resource Relationship.

  • If changes are indicated for the selected time period, choose Changes to view the configuration changes made to the resource. The Changes section also lists the relationship changes that occurred as a result of configuration changes.

  • Choose CloudTrail events to view information about API calls that involve the resource, such as the event time, the user name, and the event name. For example, if AWS Config is recording IAM resource types, and an IAM role is updated, you can view the event to see the UpdateRole in the Event name column.

  • In the View event column, you can also choose the CloudTrail link to view more information about the event in the CloudTrail console. You must create a trail and enable logging for CloudTrail to view the events in the AWS Config timeline.

  • Choose View Details to view the configuration information in text or JSON format. Click the arrows in the details window to see additional details.

    For more information about the entries in the details window, see Components of a Configuration Item.

  • Choose Manage resources to go to the console for the selected resource. If you make a change to the resource, go back to the AWS Config console and choose Now to see the changes. It can take up to 10 minutes to refresh the details page for the resource.

    The console also provides details pages for supported resources that you do not include in the list of resources that AWS Config records. The information on these details pages is limited and ongoing configuration changes are not shown.