[Integration]AWS Config Integration

[YANG-DB]

What is the integration resource ?

AWS Config logs integration for observability provides a powerful solution for tracking and monitoring changes to AWS resources across your environment.
By enabling AWS Config, detailed logs are generated, capturing configuration changes, compliance rules, and resource relationships

The integration with OpenSearch observability tools assist monitoring services allows for a comprehensive view of your infrastructure's configuration changes and compliance posture.

AWS Config logs integration ensures continuous monitoring, proactive compliance auditing, and swift identification of any configuration drift or unauthorized changes.

Aws Config

What is the integration source protocol ?

   {
      "relatedEvents": [],
      "relationships": [
        {
          "resourceId": "i-007548491526e87e9",
          "resourceType": "AWS::SSM::ManagedInstanceInventory",
          "name": "Is associated with "
        }
      ],
      "configuration": {
        "AWS:ComplianceItem": {
          "SchemaVersion": "1.0",
          "Content": {
            "Patch": {
              "libstoragemgmt.x86_64": {
                "Status": "COMPLIANT",
                "InstalledTime": "2023-01-24T23:04:50Z",
                "ExecutionType": "Command",
                "PatchSeverity": "",
                "Title": "libstoragemgmt.x86_64:0:1.6.1-2.amzn2",
                "Severity": "UNSPECIFIED",
                "ComplianceType": "Patch",
                "Classification": "",
                "DocumentVersion": "",
                "Id": "libstoragemgmt.x86_64",
                "PatchState": "InstalledOther",
                "PatchBaselineId": "pb-0175ff8060cec021b",
                "DocumentName": "",
                "PatchGroup": ""
              },
              "hibagent.noarch": {
                "Status": "COMPLIANT",
                "InstalledTime": "2023-01-24T23:05:20Z",
                "ExecutionType": "Command",
                "PatchSeverity": "",
                "Title": "hibagent.noarch:0:1.1.0-5.amzn2",
                "Severity": "UNSPECIFIED",
                "ComplianceType": "Patch",
                "Classification": "",
                "DocumentVersion": "",
                "Id": "hibagent.noarch",
                "PatchState": "InstalledOther",
                "PatchBaselineId": "pb-0175ff8060cec021b",
                "DocumentName": "",
                "PatchGroup": ""
              }
            }
          }
        }
      },
      "supplementaryConfiguration": {},
      "tags": {},
      "configurationItemVersion": "1.3",
      "configurationItemCaptureTime": "2023-02-01T11:59:47.151Z",
      "configurationStateId": 1675252787151,
      "awsAccountId": "347283850106",
      "configurationItemStatus": "ResourceDiscovered",
      "resourceType": "AWS::SSM::PatchCompliance",
      "resourceId": "AWS::SSM::ManagedInstanceInventory/i-007548491526e87e9",
      "awsRegion": "eu-west-1",
      "configurationStateMd5Hash": ""
    },
  ....

What is the integration target protocol ?

    "mappings": {
        "properties": {
            "@timestamp": {
                "type": "alias",
                "path": "configurationItemCaptureTime"
            },
            "configurationItemCaptureTime": {
                "type": "date"
            },
            "configurationItemVersion": {
                "type": "keyword"
            },
            "availabilityZone": {
                "type": "keyword"
            },
            "awsAccountId": {
                "type": "keyword"
            },
            "awsRegion": {
                "type": "keyword"
            },
            "resourceType": {
                "type": "keyword"
            },
            "configuration": {
                "properties": {
                    "state": {
                        "type": "keyword"
                    },
                    "lastUpdateStatus": {
                        "type": "keyword"
                    },
                    "status": {
                        "type": "keyword"
                    },
                    "availabilityZones": {
                        "properties": {
                            "zoneName": {
                                "type": "keyword"
                            }
                        }
                    }
                }
            },
            "configurationItemStatus": {
                "type": "keyword"
            }
        }
    },

Which agents would you use to ship this data ?

Describe the agents you may be using to ship this telemetry data [ OTEL receiver / Fluent-bit / Telegraf / collectd ]

Would you be using an ingestion pipeline ?

Describe whether you may be using an ingestion pipeline to collect and enrich the data on-route [ OTEL Collector / Data-Prepper / ADOT collector ]

Which Dashboards would you be using ?

Describe the dashboard you would like to see on-top of the ingested telemetry signals ?[Try adding screenshots & descriptions]

---

Do you have any additional context?

#668