
Audit AWS account support levels across your organization using AWS Config with a custom CloudFormation Registry resource to ensure all accounts maintain your preferred support plan.


<div><p>This article explains how to audit AWS Support plan levels across all accounts in an AWS Organization using AWS Config and CloudFormation Registry.</p><ul><li>Create custom AWS Config resource using CloudFormation Registry private extension</li><li>Deploy schema package to S3 and distribute via CloudFormation StackSets</li><li>Custom Lambda function checks each account's support level against desired plan</li><li>View compliance results in AWS Config console and aggregator</li><li>Use Advanced Query to identify non-compliant accounts across organization</li><li>Support level displayed as tag on custom configuration item</li><li>Estimated cost approximately $3 USD monthly per 100 accounts</li></ul><p>This solution enables Enterprise customers with hundreds of accounts to centrally audit and enforce consistent AWS Support plan coverage without manual per-account verification.</p></div>


Related articles