sjramblings.io

AWS Config Just Added 30 Resource Types. The Bedrock AgentCore Ones Matter Most.

AWS quietly announced support for 30 new resource types in AWS Config on March 2, 2026. If you’re the kind of person who skims these announcements and moves on, I get it. Most Config resource type expansions are incremental. This one isn’t.

A Reminder of the Power of AWS Config

Today, I was reminded of the rich content stored in AWS Config and how easily it can reveal so much about an AWS Organisation across one or many accounts.

AWS Config Rules Blessed with Cloudformation cfn-guard Support!

They said it was coming, and here it is! Support for defining custom cfn-guard rules for AWS Config via Cloudformation.

Config Conundrum

AWS Config At our organisation we use custom config rules to help us achieve near real-time compliance and remediation.

Getting Started with AWS CloudFormation Guard (cfn-guard): Policy-as-Code Guide

Update Link to official AWS blog post here A fair few policy-as-code tools are popping up these days. This post looks at getting started with cfn-guard to parse AWS Config Resource JSON outputs.

How to use cfn-guard with AWS Config

I’m not sure when but AWS Config now supports using Guard rules to determine the compliance of resources. This is a pretty neat integration and one of the first I’ve seen from AWS on a side Open Source Project they have created.

Security Hub now supports Custom AWS Config Rules

AWS recently announced an integration that I’m a little excited about!