Install the AWS Config App and view the Dashboards
Install the Sumo Logic App
Now that you have configured AWS Config, install the Sumo Logic App for AWS Config to take advantage of the pre-configured searches and dashboards to analyze your AWS Config data.
To install the app:
Dashboards
This section describes the dashboards provided by the AWS Config app. For general information about dashboards, see About Dashboards.
AWS Config Overview
The AWS Config Overview dashboard runs in Live mode. Live mode dashboards automatically refresh; they do not backfill with historical data. An interactive version of this dashboard, described in the following section, is also provided.
Recent Modifications. Displays the number of Resource Change Notifications as a single value chart for the last 24 hours.
Configuration Activity by AWS Region. Shows the distribution of the Resource Change Notifications by AWS Region in a map chart for the last 14 days.
Changed Resources by Type. Provides the Resource Change Notifications of type “OK” in a pie chart of (Resource Changed, not Created or Deleted) grouped by Resource Type for the last 14 days.
Resource Modifications Trend. Provides the distribution of the Resource Change Notifications by AWS Resource in a stacked bar chart for the last 14 days.
Discovered Resources by Type. Displays the Resource Change Notifications of type “ResourceDiscovered” grouped by Resource Type in a pie chart for the last 14 days.
Modifications by Day - Outlier. Displays the quantity of Resource Change Notifications grouped by day in an outlier line chart for the last 14 days.
Modifications by Day - Trend. Shows the quantity of Resource Change Notifications in a line chart with a trend line grouped by day for the last 14 days.
Deleted Resources by Type. Displays the Resource Change Notifications of type “ResourceDeleted” grouped by Resource Type in a pie chart for the last 14 days.
AWS Overview - Interactive
This dashboard is identical to the AWS Config Overview dashboard, described above, but runs in interactive mode. In interactive mode, a dashboard backfills with historical data, per your selected time range, but does not automatically refresh. You can manually refresh an interactive dashboard, by refreshing your browser, or using the Refresh option on the Details menu on the dashboard.
Resource Modifications Details - Interactive
This dashboard runs in interactive mode. As described above, interactive dashboards backfills with historical data, and must be manually refreshed to see new data.
Resource Modifications. Shows a table of recent Resource Change Notifications, including the configuration diff provided in the SNS Notification for the last six hours.
Resource Relationships. Displays a table of relationships related to the resources modified in recent Resource Change Notifications for the last six hours.
Resource Tags. Provides a table of tags related to the resources modified in recent Resource Change Notifications for the last six hours.
Resource Modifications Trend. Displays the distribution of the Resource Change Notifications by AWS Resource in a stacked column chart for the last 14 days.
Network ACL Rules. Shows a table of Network ACL Rules related to the NetworkAcl resources modified in recent Resource Change Notifications for the last six hours.
VPN Gateway Telemetry. Provides a table of Telemetry messages related to the VPNConnection resources modified in recent Resource Change Notifications for the last six hours.
Filters
The following filters are provided for use with the AWS Overview - Interactive and Resource Modifications Details - Interactive dashboards.
Resource Type. The type of the resource modified. Examples: AWS::EC2::Instance, AWS::EC2::NetworkAcl
Resource Id. The id of the resource modified. Examples: vpc-0000001, i-ffffffff
Region. The AWS Region where the resource modified is located. Examples: us-east-1, us-west-2
Account Id. The AWS Account containing the resource modified. Example: 1234567891011
Tag. The Tag key displayed in the Resource Tags panel. Examples: Name, Stack.
Tag Value. The Tag Value displayed in the Resource Tags panel. Examples: Test-VPN, DB Instance.