Deploying a Conformance Pack Using the AWS Config Console - AWS Config

Deploying a Conformance Pack Using the AWS Config Console

On the Conformance packs page, you can deploy a conformance pack for an account in a Region. You can also edit and delete the deployed conformance pack.

Deploy a Conformance Pack Using Sample Templates

You can deploy a conformance pack using AWS Config sample templates.

  1. Sign in to the AWS Management Console and open the AWS Config console at https://console.aws.amazon.com/config/.

  2. Navigate to the Conformance packs page and choose Deploy conformance pack.

  3. On the Specify template page, either choose a sample template or use an existing template.

    • If you choose Use sample template, select a Sample template from the drop-down list of sample templates.

      For information about the contents of each template, see Conformance Pack Sample Templates.

    • If you choose Template is ready, specify the template source. It is either an Amazon S3 URI or a template that you upload.

      If your template is more than 50 KB, upload it to the S3 bucket and select that S3 bucket location. For example: s3://bucketname/prefix.

  4. Choose Next.

  5. On the Specify conformance pack details page, type the name for your conformance pack.

    The conformance pack name must be a unique name with a maximum of 256 alphanumeric characters. The name can contain hyphens but cannot contain spaces.

  6. Optional: Add a parameter.

    Parameters are defined in your template and help you manage and organize your resources.

  7. Choose Next.

  8. On the Review and deploy page, review all of the information.

    You can edit the template details and conformance pack details by choosing Edit.

  9. Choose Deploy conformance pack.

    AWS Config displays the conformance pack on the conformance pack page with the appropriate status.

    If your conformance pack deployment fails, check your permissions, verify that you did the prerequisite steps, and try again. Or you can contact AWS Config support.

To deploy a conformance pack using sample template with remediations, see the Prerequisites for Using a Conformance Pack With Remediation and then use the preceding procedure.

To deploy a conformance pack with one or more AWS Config rules, see the Prerequisites for Using a Conformance Pack With One or More AWS Config Rules.

Edit a Conformance Pack

  1. To edit a conformance pack, select the conformance pack from the table.

  2. Choose Actions and then choose Edit.

  3. On the Edit conformance pack page, you can edit the template details, sample template, conformance pack, and parameters section.

    You cannot change the name of the conformance pack.

  4. Choose Save changes.

    The conformance pack is displayed with the AWS Config rules.

Delete a Conformance Pack

  1. To delete a conformance pack, select the conformance pack from the table.

  2. Choose Actions and then choose Delete.

  3. On the delete conformance pack dialog box, confirm if you would like to permanently delete this conformance pack.

    You cannot revert this action. When you delete a conformance pack, you delete all of the AWS Config rules and remediation actions in that conformance pack.

  4. Enter Delete and choose Delete.

    On the Conformance packs page, you can see the deployment status as Deleting until the conformance pack is completely deleted.