AWS Config is the service that enables Kenneth to assess, audit, and evaluate the configurations of AWS resources.

AWS Config: This service provides a detailed view of the configuration of AWS resources within the account. It includes a history of configuration changes and relationships between AWS resources, making it possible to review changes and determine overall compliance against internal guidelines1.

Capabilities of AWS Config:

Configuration and Relationship Review: AWS Config records and evaluates the configurations and relationships of AWS resources, allowing Kenneth to track changes and review the environment’s compliance status.

Resource Configuration History: It maintains a detailed history of the configurations of AWS resources over time.

Compliance Evaluation: AWS Config can assess resource configurations against desired configurations to ensure compliance with internal guidelines.

Why Not the Others?:

AWS CloudTrail: This service is focused on providing event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.

AWS CloudFormation: While CloudFormation is used for creating and managing a collection of related AWS resources, it does not provide configuration history or compliance evaluation.

AWS Security Hub: Security Hub gives a comprehensive view of high-priority security alerts and compliance status across AWS accounts, but it does not offer detailed configuration history or relationship tracking.

References:

AWS Config: Assess, audit, and evaluate configurations of your resources1.