PCI DSS controls that you might want to disable - AWS Security Hub

PCI DSS controls that you might want to disable

To save on the cost of AWS Config, you can disable recording of global resources in all but one Region. Then disable these controls that deal with global resources in all Regions except for the Region that runs global recording.

If you disable these controls and disable recording of global resources in a particular Region, you should also disable [PCI.Config.1] AWS Config should be enabled. This is because [PCI.Config.1] AWS Config should be enabled requires recording of global resources in order to pass.