Menu
AWS Config
Developer Guide

Deliver Configuration Snapshot

AWS Config delivers configuration items of the AWS resources that AWS Config is recording to the Amazon S3 bucket that you specified when you configured your delivery channel.

To deliver configuration snapshot

  • Use the deliver-config-snapshot command by specifying the name assigned by AWS Config when you configured your delivery channel; for example:

    $ aws configservice deliver-config-snapshot --delivery-channel-name default { "configSnapshotId": "94ccff53-83be-42d9-996f-b4624b3c1a55" }

The next step is to verify that configuration snapshot was delivered successfully to the delivery channel.

To verify delivery status

  • Use the describe-delivery-channel-status command to verify that the AWS Config has started delivering the configurations to the specified delivery channel; for example:

    $ aws configservice describe-delivery-channel-status { "DeliveryChannelsStatus": [ { "configStreamDeliveryInfo": { "lastStatusChangeTime": 1415138614.125, "lastStatus": "SUCCESS" }, "configHistoryDeliveryInfo": { "lastSuccessfulTime": 1415148744.267, "lastStatus": "SUCCESS", "lastAttemptTime": 1415148744.267 }, "configSnapshotDeliveryInfo": { "lastSuccessfulTime": 1415333113.4159999, "lastStatus": "SUCCESS", "lastAttemptTime": 1415333113.4159999 }, "name": "default" } ] }

    The response lists the status of all the three delivery formats that AWS Config uses to deliver configurations to your bucket and topic.

    Take a look at the lastSuccessfulTime field in configSnapshotDeliveryInfo. The time should match the time you last requested the delivery of the configuration snapshot.

Note

AWS Config uses the UTC format (GMT-08:00) to record the time.

To view the configuration snapshot in your Amazon S3 bucket

  1. Sign in to the AWS Management Console and open the Amazon S3 console at https://console.aws.amazon.com/s3/.

  2. In the Amazon S3 console All Buckets list, click the name of your Amazon S3 bucket.

  3. Click through the nested folders in your bucket until you see the ConfigSnapshot object with a snapshot ID that matches with the ID returned by the command. Download and open the object to view the configuration snapshot.

    The S3 bucket also contains an empty file named ConfigWritabilityCheckFile. AWS Config creates this file to verify that the service can successfully write to the S3 bucket.