Home icon

Streamline compliance management with AWS Config custom rules and conformance packs

AWS Cloud Operations Blog



This article discusses how to manage compliance controls with AWS Config custom rules and conformance packs. It explains that custom rules written in AWS CloudFormation Guard (cfn-guard) domain-specific language (DSL) can be used to define custom policies and evaluate resource compliance.

Specifically, the article covers:

  • What are AWS Config custom rules, conformance packs, and how they help manage compliance at scale
  • A sample conformance pack with one managed rule (access-keys-rotated), and three custom policy rules (custom-ddb-pit-recovery, custom-gp3-iops, custom-s3-kms-encryption)
  • Steps to deploy the sample conformance pack in the AWS Config console
  • How to check the conformance pack compliance score in the AWS Config console
  • Steps to clean up and delete the sample conformance pack


Go to article

The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.

Related articles

May 5
2025
Manage Custom AWS Config Rules with Remediation Using AWS Config Conformance Pack
May 28
2024
Simplify compliance management of multicloud or hybrid resources with AWS Config
Apr 11
2025
Unlock the Power of AWS Config: Centralized Compliance and Resource Management
Nov 12
2024
Discover duplicate AWS Config rules for streamlined compliance

The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.