AWS Config Adds Support for 52 New Resource Types

AWS Config now supports 52 additional AWS resource types across key services including Amazon EC2, Amazon Bedrock, and Amazon SageMaker. This expansion provides greater coverage over your AWS environment, enabling you to more effectively discover, assess, audit, and remediate an even broader range of resources.

With this launch, if you have enabled recording for all resource types, then AWS Config will automatically track these new additions. The newly supported resource types are also available in Config rules and Config aggregators.

You can now use AWS Config to monitor the following newly supported resource types in all AWS Regions where the supported resources are available:

Resource Types
AWS::ApiGateway::DomainName	AWS::IAM::GroupPolicy
AWS::ApiGateway::Method	AWS::IAM::RolePolicy
AWS::ApiGateway::UsagePlan	AWS::IAM::UserPolicy
AWS::AppConfig::Extension	AWS::IoTCoreDeviceAdvisor::SuiteDefinition
AWS::Bedrock::ApplicationInferenceProfile	AWS::MediaPackageV2::Channel
AWS::Bedrock::Prompt	AWS::MediaPackageV2::ChannelGroup
AWS::BedrockAgentCore::BrowserCustom	AWS::MediaTailor::LiveSource
AWS::BedrockAgentCore::CodeInterpreterCustom	AWS::MSK::ServerlessCluster
AWS::BedrockAgentCore::Runtime	AWS::PaymentCryptography::Alias
AWS::CloudFormation::LambdaHook	AWS::PaymentCryptography::Key
AWS::CloudFormation::StackSet	AWS::RolesAnywhere::CRL
AWS::Comprehend::Flywheel	AWS::RolesAnywhere::Profile
AWS::Config::AggregationAuthorization	AWS::S3::AccessGrant
AWS::DataSync::Agent	AWS::S3::AccessGrantsInstance
AWS::Deadline::Fleet	AWS::S3::AccessGrantsLocation
AWS::Deadline::QueueFleetAssociation	AWS::SageMaker::DataQualityJobDefinition
AWS::EC2::IPAMPoolCidr	AWS::SageMaker::MlflowTrackingServer
AWS::EC2::SubnetNetworkAclAssociation	AWS::SageMaker::ModelBiasJobDefinition
AWS::EC2::VPCGatewayAttachment	AWS::SageMaker::ModelExplainabilityJobDefinition
AWS::ECR::RepositoryCreationTemplate	AWS::SageMaker::ModelQualityJobDefinition
AWS::ElasticLoadBalancingV2::TargetGroup	AWS::SageMaker::MonitoringSchedule
AWS::EMR::Studio	AWS::SageMaker::StudioLifecycleConfig
AWS::EMRContainers::VirtualCluster	AWS::SecretsManager::RotationSchedule
AWS::EMRServerless::Application	AWS::SES::DedicatedIpPool
AWS::EntityResolution::MatchingWorkflow	AWS::SES::MailManagerTrafficPolicy
AWS::Glue::Registry	AWS::SSM::ResourceDataSync