Core concept
Managed rules (200+): 'S3 bucket public?', 'EBS encrypted?', 'MFA on root?'. Custom rules via Lambda.
Advertisement
How it works
Config Aggregator: multi-account, multi-region view.
Advertisement
Trade-offs + gotchas
Compliance auditing. Incident forensics (what changed?). Drift detection. Regulated industries.