AWS Config now supports 52 additional AWS resource types across key services including Amazon EC2, Amazon Bedrock, and Amazon SageMaker. This expansion provides greater coverage over your AWS environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources.
With this launch, if you have enabled recording for all resource types, then AWS Config will automatically track these new additions. The newly supported resource types are also available in Config rules and Config aggregators.
You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where the supported resources are available:
| Resource Types | |
| AWS::ApiGateway::DomainName | AWS::IAM::GroupPolicy |
| AWS::ApiGateway::Method | AWS::IAM::RolePolicy |
| AWS::ApiGateway::UsagePlan | AWS::IAM::UserPolicy |
| AWS::AppConfig::Extension | AWS::IoTCoreDeviceAdvisor::SuiteDefinition |
| AWS::Bedrock::ApplicationInferenceProfile | AWS::MediaPackageV2::Channel |
| AWS::Bedrock::Prompt | AWS::MediaPackageV2::ChannelGroup |
| AWS::BedrockAgentCore::BrowserCustom | AWS::MediaTailor::LiveSource |
| AWS::BedrockAgentCore::CodeInterpreterCustom | AWS::MSK::ServerlessCluster |
| AWS::BedrockAgentCore::Runtime | AWS::PaymentCryptography::Alias |
| AWS::CloudFormation::LambdaHook | AWS::PaymentCryptography::Key |
| AWS::CloudFormation::StackSet | AWS::RolesAnywhere::CRL |
| AWS::Comprehend::Flywheel | AWS::RolesAnywhere::Profile |
| AWS::Config::AggregationAuthorization | AWS::S3::AccessGrant |
| AWS::DataSync::Agent | AWS::S3::AccessGrantsInstance |
| AWS::Deadline::Fleet | AWS::S3::AccessGrantsLocation |
| AWS::Deadline::QueueFleetAssociation | AWS::SageMaker::DataQualityJobDefinition |
| AWS::EC2::IPAMPoolCidr | AWS::SageMaker::MlflowTrackingServer |
| AWS::EC2::SubnetNetworkAclAssociation | AWS::SageMaker::ModelBiasJobDefinition |
| AWS::EC2::VPCGatewayAttachment | AWS::SageMaker::ModelExplainabilityJobDefinition |
| AWS::ECR::RepositoryCreationTemplate | AWS::SageMaker::ModelQualityJobDefinition |
| AWS::ElasticLoadBalancingV2::TargetGroup | AWS::SageMaker::MonitoringSchedule |
| AWS::EMR::Studio | AWS::SageMaker::StudioLifecycleConfig |
| AWS::EMRContainers::VirtualCluster | AWS::SecretsManager::RotationSchedule |
| AWS::EMRServerless::Application | AWS::SES::DedicatedIpPool |
| AWS::EntityResolution::MatchingWorkflow | AWS::SES::MailManagerTrafficPolicy |
| AWS::Glue::Registry | AWS::SSM::ResourceDataSync |
To view the complete list of AWS Config supported resource types, see the supported resource types page.
AWS Config now supports 52 additional AWS resource types across key services including Amazon EC2, Amazon Bedrock, and Amazon SageMaker. This expansion provides greater coverage over your AWS environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources. With this launch, if you have enabled recording for all resource types, then AWS Config will automatically track these new additions. The newly supported resource types are also available in Config rules and Config aggregators. You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where the supported resources are available:
Resource Types
AWS::ApiGateway::DomainName
AWS::IAM::GroupPolicy
AWS::ApiGateway::Method
AWS::IAM::RolePolicy
AWS::ApiGateway::UsagePlan
AWS::IAM::UserPolicy
AWS::AppConfig::Extension
AWS::IoTCoreDeviceAdvisor::SuiteDefinition
AWS::Bedrock::ApplicationInferenceProfile
AWS::MediaPackageV2::Channel
AWS::Bedrock::Prompt
AWS::MediaPackageV2::ChannelGroup
AWS::BedrockAgentCore::BrowserCustom
AWS::MediaTailor::LiveSource
AWS::BedrockAgentCore::CodeInterpreterCustom
AWS::MSK::ServerlessCluster
AWS::BedrockAgentCore::Runtime
AWS::PaymentCryptography::Alias
AWS::CloudFormation::LambdaHook
AWS::PaymentCryptography::Key
AWS::CloudFormation::StackSet
AWS::RolesAnywhere::CRL
AWS::Comprehend::Flywheel
AWS::RolesAnywhere::Profile
AWS::Config::AggregationAuthorization
AWS::S3::AccessGrant
AWS::DataSync::Agent
AWS::S3::AccessGrantsInstance
AWS::Deadline::Fleet
AWS::S3::AccessGrantsLocation
AWS::Deadline::QueueFleetAssociation
AWS::SageMaker::DataQualityJobDefinition
AWS::EC2::IPAMPoolCidr
AWS::SageMaker::MlflowTrackingServer
AWS::EC2::SubnetNetworkAclAssociation
AWS::SageMaker::ModelBiasJobDefinition
AWS::EC2::VPCGatewayAttachment
AWS::SageMaker::ModelExplainabilityJobDefinition
AWS::ECR::RepositoryCreationTemplate
AWS::SageMaker::ModelQualityJobDefinition
AWS::ElasticLoadBalancingV2::TargetGroup
AWS::SageMaker::MonitoringSchedule
AWS::EMR::Studio
AWS::SageMaker::StudioLifecycleConfig
AWS::EMRContainers::VirtualCluster
AWS::SecretsManager::RotationSchedule
AWS::EMRServerless::Application
AWS::SES::DedicatedIpPool
AWS::EntityResolution::MatchingWorkflow
AWS::SES::MailManagerTrafficPolicy
AWS::Glue::Registry
AWS::SSM::ResourceDataSync
To view the complete list of AWS Config supported resource types, see the supported resource types page.