4 ms·

AWS Config

62 points by leef 12y ago

brianbreslin 12y ago
Can someone explain this to me in laymen's terms?
- jameskilton 12y ago
  I think, at its core, it is a configuration history tracking tool, with the ability to get a full single-page look at all of your AWS resources.
- rev_bird 12y ago
  From what I can tell, it's a combination of a few useful tools: 1) Configuration monitoring – if an app is running on six identical servers, and all of the sudden one box has a different config file sitting on it, or somebody installs updates that they weren't supposed to, I'd like an email about that. 2) A "source of truth" for your cloud resources. Smarter people than I have articulated our need for this at my employer, but the simplest way I know of to describe it is that you can query the configuration of your boxes to figure things out. "Show me all the boxes running Nginx 1.6," for example, or "Show me all the boxes that haven't gotten the latest Bash update." Not sure how it does that, but it seems to be in there.
  - sciurus 12y ago
    I don't think AWS Config handles either of your examples. It records the state of various AWS resources, not the state of the software/environment running within an EC2 instance.
- ihsw 12y ago
  Measuring your entire server architecture involves many things from software versions provided by the package maintainer (Ubuntu/Debian, RHEL/CentOS, custom, etc), memory capacity of your machines, disk allocation, and so forth. Changes to this server architecture -- anything and everything -- should be managed in a controlled environment. AWS Config provides insight into this, notifying you of when any changes occur. They provide you with a constant stream of changes occurring, like getting Tweets whenever anything changes. Amazon already has AWS CloudWatch, this takes it a step further than monitoring performance, resource utilization, and operational health. It delves into what happens before performance thresholds are breached and operational health is diminished. It's an auditing tool, basically.
- geertj 12y ago
  The most interesting thing about it is that it provides an event bus that can stream inventory updates (via SQS). This is super useful for cloud management platforms that keep a copy of you resources in Amazon e.g. for policy enforcement and compliance. Now the copy of the data will be much closer to the actual state of the resources in the cloud. The ManageIQ project already added support for it via this pull request: https://github.com/ManageIQ/manageiq/pull/1049 https://github.com/ManageIQ/manageiq/pull/1049 Also see the following blog post by yours truly http://www.redhat.com/en/about/blog/red-hat-brings-expanded-governance-amazon-web-services-based-public-clouds-manageiq-community http://www.redhat.com/en/about/blog/red-hat-brings-expanded-...
freshflowers 12y ago
Small print: currently only available in region US East.
- sciurus 12y ago
  US East typically gets the cool new toys first. It would be interesting to look through the AWS service health reports for unrelated services to determine if it suffers more problems as a result of this.
bennetthi 12y ago
It's pretty amazing how many products AWS is releasing at re:Invent.
sciurus 12y ago
I tried to enable Config but got the informative "Error {{errorMessage}}" http://i.imgur.com/fUT6ROI.png http://i.imgur.com/fUT6ROI.png

AWS Config

62 points by leef 12y ago

brianbreslin 12y ago

Can someone explain this to me in laymen's terms?

jameskilton 12y ago
I think, at its core, it is a configuration history tracking tool, with the ability to get a full single-page look at all of your AWS resources.
rev_bird 12y ago
From what I can tell, it's a combination of a few useful tools: 1) Configuration monitoring – if an app is running on six identical servers, and all of the sudden one box has a different config file sitting on it, or somebody installs updates that they weren't supposed to, I'd like an email about that. 2) A "source of truth" for your cloud resources. Smarter people than I have articulated our need for this at my employer, but the simplest way I know of to describe it is that you can query the configuration of your boxes to figure things out. "Show me all the boxes running Nginx 1.6," for example, or "Show me all the boxes that haven't gotten the latest Bash update." Not sure how it does that, but it seems to be in there.
- sciurus 12y ago
  I don't think AWS Config handles either of your examples. It records the state of various AWS resources, not the state of the software/environment running within an EC2 instance.
ihsw 12y ago
Measuring your entire server architecture involves many things from software versions provided by the package maintainer (Ubuntu/Debian, RHEL/CentOS, custom, etc), memory capacity of your machines, disk allocation, and so forth. Changes to this server architecture -- anything and everything -- should be managed in a controlled environment. AWS Config provides insight into this, notifying you of when any changes occur. They provide you with a constant stream of changes occurring, like getting Tweets whenever anything changes. Amazon already has AWS CloudWatch, this takes it a step further than monitoring performance, resource utilization, and operational health. It delves into what happens before performance thresholds are breached and operational health is diminished. It's an auditing tool, basically.
geertj 12y ago
The most interesting thing about it is that it provides an event bus that can stream inventory updates (via SQS). This is super useful for cloud management platforms that keep a copy of you resources in Amazon e.g. for policy enforcement and compliance. Now the copy of the data will be much closer to the actual state of the resources in the cloud. The ManageIQ project already added support for it via this pull request: https://github.com/ManageIQ/manageiq/pull/1049 https://github.com/ManageIQ/manageiq/pull/1049 Also see the following blog post by yours truly http://www.redhat.com/en/about/blog/red-hat-brings-expanded-governance-amazon-web-services-based-public-clouds-manageiq-community http://www.redhat.com/en/about/blog/red-hat-brings-expanded-...

freshflowers 12y ago

Small print: currently only available in region US East.

sciurus 12y ago
US East typically gets the cool new toys first. It would be interesting to look through the AWS service health reports for unrelated services to determine if it suffers more problems as a result of this.

bennetthi 12y ago

It's pretty amazing how many products AWS is releasing at re:Invent.

sciurus 12y ago

I tried to enable Config but got the informative "Error {{errorMessage}}" http://i.imgur.com/fUT6ROI.png http://i.imgur.com/fUT6ROI.png