AWS Config is a cloud service that records the configuration state and change history of AWS resources such as buckets, instances, security groups, and IAM-related settings. It can track when a resource was created, modified, or deleted, and it can evaluate those changes against security rules or compliance policies.
In cyber security, AWS Config matters because it gives defenders a timeline for forensic review and helps spot risky drift from approved baselines. Attackers may try to create brief misconfigurations, expose a resource, and remove it before a scheduled scan notices. If AWS Config recording is enabled for the right resource types, that change history can preserve evidence even when a posture tool misses the moment. Used well, it supports alerting, investigations, and controls that make short-lived exposure harder to hide.