Deploying Conformance Packs for AWS Config

You can deploy a conformance pack using AWS Config sample templates or your own custom template. For instructions on how to create personalized conformance packs, see Custom Conformance Pack.

1. Sign in to the AWS Management Console and open the AWS Config console at https://console.aws.amazon.com/config/.

2. Navigate to the Conformance packs page and choose Deploy conformance pack.

3. On the Specify template page, either choose a sample template or use an existing template. For more information, see Conformance Pack Sample Templates.

   • If you choose Use sample template, select a Sample template from the dropdown list of sample templates.

     For information about the contents of each template, see Conformance Pack Sample Templates.

   • If you choose Template is ready, specify the template source. It is either an Amazon S3 URI, an AWS Systems Manager document (SSM document), or a template that you upload.

     If your template is more than 50 KB, upload it to the S3 bucket and select that S3 bucket location. For example: s3://bucketname/prefix.

     Important

     Choose Template is ready if you created your conformance pack YAML file from scratch based on Custom Conformance Pack.

4. Choose Next.

5. On the Specify conformance pack details page, enter the name for your conformance pack.

   The conformance pack name must be a unique name with a maximum of 256 alphanumeric characters. The name can contain hyphens but cannot contain spaces.

6. Optional: Add a parameter.

   Parameters are defined in your template and help you manage and organize your resources.

7. Choose Next.

8. On the Review and deploy page, review all of the information.

   You can edit the template details and conformance pack details by choosing Edit.

9. Choose Deploy conformance pack.

   AWS Config displays the conformance pack on the conformance pack page with the appropriate status.

   If your conformance pack deployment fails, check your permissions, verify that you did the prerequisite steps, and try again. Or you can contact AWS Support.

1. Open a command prompt or a terminal window.

2. Enter one of the following commands to deploy a conformance pack named MyConformancePack. The template source is either an Amazon S3 URI, a template that you upload, or an AWS Systems Manager document (SSM document).

   Amazon S3 URI

   aws configservice put-conformance-pack
   --conformance-pack-name MyConformancePack
   --template-s3-uri "s3://amzn-s3-demo-bucket/templateName.yaml"
   --delivery-s3-bucket amzn-s3-demo-bucket

   YAML template from your local directory

   aws configservice put-conformance-pack
   --conformance-pack-name MyConformancePack
   --template-body template body

   AWS Systems Manager Document (Systems Manager Document)

   aws configservice put-conformance-pack
   --conformance-pack-name MyConformancePack
   --template-ssm-document-details DocumentName=SSMDocumentName,DocumentVersion=SSMDocumentVersion
   --delivery-s3-bucket amzn-s3-demo-bucket

3. Press Enter to run the command.

   You should see output similar to the following.

   {
       "conformancePackArn": "arn:aws:config:us-west-2:AccountID:conformance-pack/MyConformancePack1/conformance-pack-ID"
   }