AWS Config in AWS GovCloud (US)
AWS Config provides a detailed view of the resources associated with your AWS account, including how they are configured, how they are related to one another, and how the configurations and their relationships have changed over time.
AWS Config and AWS Config Rules are supported in the AWS GovCloud (US) Region.
How AWS Config differs for AWS GovCloud (US)
The implementation of AWS Config is different for AWS GovCloud (US) in the following ways:
-
AWS Config recording of third-party resources or custom resource types are not supported in AWS GovCloud (US).
-
For a list of rules supported in AWS GovCloud (US-East), see List of AWS Config Managed Rules by Region Availability | AWS GovCloud (US-East).
-
For a list of rules supported in AWS GovCloud (US-West), see List of AWS Config Managed Rules by Region Availability | AWS GovCloud (US-West).
Documentation for AWS Config
Export-controlled content
For AWS Services architected within the AWS GovCloud (US) Regions, the following list explains how certain components of data may leave the AWS GovCloud (US) Regions in the normal course of the service offerings. The list can be used as a guide to help meet applicable customer compliance obligations. Data not included in the following list remains within the AWS GovCloud (US) Regions.
-
AWS Config metadata is not permitted to contain export-controlled data. This includes the naming and configuration data that you enter when creating and managing your AWS Config settings.
For example, do not enter export-controlled data into user input fields such as the following:
-
Annotations for rule evaluations
-
Resource identifier
-
S3 bucket name
-
SNS topic name
-
Tag key
-
