Enabling AWS Config Reports
You can use CloudCheckr to report on data from AWS Config. If the access key and secret key used when configuring your project does not have permissions to report on AWS Config activity you will need to update that group or user's permissions within AWS IAM.
Procedure
- Log in to your Amazon Web Services Management Console.
- Load the Identity and Access Management (IAM) dashboard.
- From the right-hand IAM menu, click Groups.
- Select the group that contains the user whose access and secret key were added to CloudCheckr.
- Click the Permissions tab.
- Click the Manage Policy link.
- Within the policy document, add the following:
"config:DescribeDeliveryChannels","config:DescribeDeliveryChannelStatus","config:DescribeConfigurationRecorders","config:DescribeConfigurationRecorderStatus", - Click Apply Policy.
The next snapshot that CloudCheckr takes of your AWS account will also retrieve and report on AWS Config.
