- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- API Documentation
- FAQs
- Contact Us
- Glossary
- Product Introduction
- Supported Resource Types
- Purchase Guide
- Getting Started
- Operation Guide
- Resources
- Rule
- Managed Rules
- List of Managed Rule
- MFA on Sensitive Operations Required for CAM Users
- MFA on Login Required for CAM Users
- No Idle User Groups on CAM
- Association with User Group Required for CAM User
- No Authorization Policies Directly Added to CAM Sub-account
- No Administrator Access Permissions Granted to CAM Users, User Groups, or Roles
- Granting of Specific High-Risk Permissions by CAM Not Allowed
- No Idle Permission Policies on CAM
- CAM Login Permission Check
- Key of CAM User Rotated at Specified Interval
- Login by CAM User within Specified Time Range
- CVM Instance Associated with Specified Security Group
- CVM Instance Not Moved to Recycle Bin
- Association of CVM Instance with Specified Role
- CVM Instance Enabled Automatic Renewal
- Notification About Expiration for CVM Instance in Monthly Subscription or Pay-As-You-Go Mode
- No Idle Security Groups
- CVM Instance in VPC
- No CVM Instances Not Assigned to Project
- Inactive Duration of CVM Instance After Shutdown Not Exceeding Specified Number of Days
- Lease Duration of CVM Instance Meeting Requirement of Specified Number of Days
- CVM Instance Bound to IPv4 Public Address
- Specified Tag Existed for Resource
- Access to Remote Risky Ports by Security Group Not Allowed
- Access to All Ports by Security Group Not Allowed
- CBS Disk Enabled Arrear Protection
- CBS Disk Enabled Encryption
- Detachable CBS Disk Not Moved to Recycle Bin
- Number of Available IP Addresses in VPC Subnet Greater than Specified Value
- Expiration Protection for CVM Instance in Pay-As-You-Go Mode
- No Idle CBS Disks
- Using Rules
- Managing Rules
- Conformance Pack
- Settings
- API Documentation
- FAQs
- Contact Us
- Glossary
What is Config?
Config assists you in centralized auditing and governance of cloud resources. It continuously records and evaluates the configuration information and related changes of various cloud resources in different regions under your account, thereby achieving efficient automated supervision and standardized operations of resources.
What problems can Config solve?
Config can solve the following problems:
Global monitoring and standardized operations
When resources of an enterprise are deployed across multiple regions, the management and operations of these resources are dispersed, leading to operation inconvenience and configuration inconsistency. Config displays resources of various types and in different regions in a centralized manner and supports search, enabling enterprises to easily understand the overall status of their current cloud environment.
Continuous compliance of cloud resources
Cloud-based IT resource management of enterprises faces a variety of potential compliance issues. Config provides rules and a conformance package template based on Tencent Cloud's best practices and automatically performs continuous compliance evaluation on the cloud resource configurations under the enterprise account. It assists enterprises in timely governance and efficient automated supervision of cloud resources.
External and internal auditing
Enterprises or users frequently modify resources and relevant configurations during management and operations in the cloud. They are usually required to promptly provide relevant resource operations records for external or internal compliance auditing while the record querying takes a long time. Config records configuration changes and automatically generates a resource configuration timeline to address the following issues:
1. Resource Configuration Lifecycle Record
Config records the configuration information and related changes of each resource starting from its creation. Enterprises and users can quickly find the historical configuration information and related changes of a resource through the timeline to facilitate analysis and auditing.
2. Record Delivery
Config can send historical configuration information and lifecycle records of resources to a COS bucket for storage, fast retrieval, and analysis.
Who are the target customers of Config?
The target customers of Config are those who need to implement auditing and governance of cloud resources. The industries covered include, but are not limited to, finance, gaming, retailing, government affairs, and healthcare. Config are used by customer-side teams responsible for managing cloud resources, such as teams of cloud operations, cloud auditing, and cloud security.
How can I start using Config?
You can refer to Get Started to quickly activate Config. For more detailed operational guidance, see Operation Guide.
How is Config billed?
Config is free of charge during the public beta period. You can use Config by referring to Get Started. When you are using related features of Config, if other services are involved, fees are charged according to the billing rules of the corresponding services. For more information, see Purchase Guide.
Yes
No
Was this page helpful?