All Products
Search
Document Center

Cloud Config:Release notes

Last Updated:Feb 08, 2024

This topic describes the release notes for Cloud Config and provides links to the relevant references.

December 2023

Feature

Description

Release date

Region

References

Compliance package import and export

Compliance packages can be exported as templates. This feature allows you to share and modify compliance packages with ease. You can use the templates to import and generate compliance packages for other accounts or account groups in an efficient manner.

2023-12-30

All regions

Write a compliance package template in a configuration file

Integration of Cloud Config general quotas and Quota Center

General quotas of Cloud Config are integrated with Quota Center. You can submit an application in the Quota Center console to increase the quotas of items such as rules and account groups.

2023-12-15

All regions

Submit an application to increase a quota

November 2023

Feature

Description

Release date

Region

References

Event delivery for integration services

Event delivery for integration services can be enabled or disabled. After Cloud Config is activated, non-compliance events are automatically delivered to EventBridge and CloudMonitor.

2023-11-30

All regions

Configure service integration settings

October 2023

Feature

Description

Release date

Region

References

Update on the compliance package templates

The following compliance package templates are available: GxPComplianceCheckForEU11, CNGMPComplianceCheck, BestPracticesForWAFSecurityPillar, BestPracticesForChangeManagement, BestPracticesForResourceExpirationReminders, BestPracticesForEnablingResourceBackup, and BestPracticesForRedis.

2023-10-30

All regions

September 2023

Feature

Description

Release date

Region

References

Creation of a custom rule based on conditions

A rule can be customized in a visualized manner or by using scripts.

2023-09-19

All regions

May 2023

Feature

Description

Release date

Region

References

Compliance library

The compliance package templates, rule templates, and remediation templates that are supported by Cloud Config can be viewed and enabled in the compliance library.

2023-05-16

All regions

Compliance library

April 2023

Feature

Description

Release date

Region

References

Custom remediation

Custom remediation can be configured for a rule. Non-compliant resources can be remediated by using Function Compute.

2023-04-30

All regions

Configure custom remediation

January 2023

Feature

Description

Release date

Region

References

Update on the compliance package templates

The BestPracticeForIdleResourceDetection compliance package template is available.

A compliance package that is created from the template can be used to check whether the purchased resources of Alibaba Cloud services are idle. Alibaba Cloud services include Elastic IP Address (EIP), Internet Shared Bandwidth, Virtual Private Cloud (VPC), and VPN Gateway. If resources are purchased but not used, resource waste may occur. We recommend that you identify idle resources and process the resources at the earliest opportunity.

2023-01-16

All regions

BestPracticeForIdleResourceDetection

Update on the compliance package templates

The BestPracticeForMultiZoneArchitecture compliance package template is available.

A compliance package that is created from the template can be used to check whether the existing Alibaba Cloud resources use the high-availability architecture. The system can provide optimization suggestions based on the check result to reduce availability risks.

2023-01-12

All regions

BestPracticeForMultiZoneArchitecture

Update on the compliance package templates

The PCIDSSDataSecurityStandard compliance package template is available.

Based on the Payment Card Industry Data Security Standard (PCI DSS) V4.0 baseline, compliance packages that are created from the template can protect account data and provide specific suggestions and compliance checks based on cloud resource usage and management.

2023-01-05

All regions

PCIDSSDataSecurityStandard

November 2022

Feature

Description

Release date

Region

References

Evaluation rules

When you create stacks in the Resource Orchestration Service (ROS) console, you can select the required rules to check the compliance status of the cloud resources in the specified ROS template.

2022-11-18

All regions

Definition and execution of evaluation rules

October 2022

Feature

Description

Release date

Region

References

Optimized evaluation reports of compliance packages

Evaluation reports can be downloaded on the Rules and Compliance Package pages and the information about resource tags is displayed on the pages.

2022-10-26

All regions

September 2022

Feature

Description

Release date

Region

References

Optimized Overview page

On the Overview page, you can enable a compliance package, view the compliance trend of the previous 180 days, view the existing non-compliant resources, and view the statistics on evaluation results by rule.

2022-09-07

All regions

Create a compliance package

August 2022

Feature

Description

Release date

Region

References

Update on the compliance package templates

The BestPracticesForInternetAccess compliance package template is available.

A compliance package that is created from the template can be used to check whether Internet access is enabled for common Alibaba Cloud resources. This way, risks can be identified at the earliest opportunity.

2022-08-31

All regions

BestPracticesForInternetAccess

June 2022

Feature

Description

Release date

Region

References

Tags specified for rules

Custom tags can be specified for rules to categorize and manage the rules.

2022-06-29

All regions

N/A

Update on the compliance package templates

The BestPracticesForResourceStability compliance package template is available.

A compliance package that is created from the template can be used to monitor the stability of cloud resources from the following six dimensions: high-availability infrastructure, capacity protection, change management, monitoring management, backup management, and fault isolation. This helps detect risks at the earliest opportunity and improve the stability and O&M efficiency of cloud resources.

2022-06-03

All regions

BestPracticesForResourceStability

April 2022

Feature

Description

Release date

Region

References

Delegated administrator accounts

The management account of a resource directory can specify a member account in the resource directory as the delegated administrator account of Cloud Config.

2022-04-20

All regions

Manage a delegated administrator account

March 2022

Feature

Description

Release date

Region

References

Automatic delivery of non-compliance events to CloudMonitor

Cloud Config can automatically deliver non-compliance events to CloudMonitor. You can configure alert rules for the non-compliance events of Cloud Config in the CloudMonitor console.

2022-03-16

All regions

Use CloudMonitor to trigger alert notifications for non-compliance events

January 2022

Feature

Description

Release date

Region

References

Advanced searches for resources

Cloud Config supports the following types of advanced searches:

  • Search in a visualized manner

    Resources can be searched by account ID, region, resource ID, resource type, resource name, resource creation time, and resource group.

  • Search by executing SQL statements

    Resources can be searched based on fields in the resource attributes by executing SQL statements. For example, the memory of an Elastic Compute Service (ECS) instance can be searched.

2022-01-21

All regions

Integration service settings

Cloud Config can deliver configuration change events and non-compliance events to EventBridge. This way, Cloud Config provides an all-in-one solution for event consumption and delivery.

2022-01-21

All regions

Configure service integration settings

November 2021

Feature

Description

Release date

Region

References

Update on the compliance package templates

The GovernanceCenterCompliancePractices compliance package template is available.

2021-11-02

All regions

GovernanceCenterCompliancePractices

April 2021

Feature

Description

Release date

Region

References

Update on the compliance package templates

The following compliance package templates are available:

  • BestPracticesForDataBase

  • BestPracticesForECS

  • RMiTComplianceCheck

2021-04-20

All regions

March 2021

Feature

Description

Release date

Region

References

Update on the compliance package templates

The following compliance package templates are available:

  • BestPracticesForNetworkAndDataSecurity

  • BestPracticesForNetwork

  • BestPracticesForAccountGovernance

2021-03-31

All regions

Compliance packages

A compliance package template is a collection of managed rules that are created by Cloud Config based on various compliance scenarios. Compliance package templates allow you to dynamically and continuously monitor the compliance of your cloud resources. The following compliance package templates are available:

  • ClassifiedProtectionPreCheck

  • BestPracticesForOSS

2021-03-15

All regions

Account groups

Cloud Config provides the account group feature to replace Cloud Config for Enterprise. You can specify multiple member accounts in an account group to manage the compliance data of the resources within these accounts in a centralized manner. In addition, you can divide member accounts into multiple account groups to implement differentiated compliance management for your enterprise.

2021-03-10

All regions

Overview

December 2020

Feature

Description

Release date

Region

References

Integration with ActionTrail events

Cloud Config is integrated with ActionTrail. You can view the details of operations performed by using the current Alibaba Cloud account and its Resource Access Management (RAM) users in the last 90 days in the Cloud Config console. These operations include access to the Cloud Config console and OpenAPI Explorer. They are recorded by ActionTrail as events.

2020-12-16

All regions

View the details of an ActionTrail event

August 2020

Feature

Description

Release date

Region

References

Delivery of resource-related logs to Simple Log Service

Resource-related logs can be delivered to a specific Simple Log Service Logstore.

2020-08-18

All regions

Deliver resource data to a Logstore in Simple Log Service

March 2020

Feature

Description

Release date

Region

References

Remediation settings

A remediation template can be specified for a rule. If Cloud Config detects that specific resource configurations violate this rule, the remediation template can be used to automatically or manually remediate the non-compliant configurations to ensure the continuous compliance of the cloud resources.

2020-03-20

All regions

February 2020

Feature

Description

Release date

Region

References

Delivery of resource event notifications to Message Service (MNS)

Notifications of resource change events, resource non-compliance events, and resource snapshot delivery events can be delivered to a specific MNS topic.

2020-02-26

All regions

Deliver resource data to an MNS topic

January 2020

Feature

Description

Release date

Region

References

Risk levels for rules

You can define risk levels for rules to determine which rules you want to focus on when different rules have non-compliance evaluation results.

2020-01-15

All regions

Create a rule based on a managed rule

Display of associated resources

The details page of a resource displays the resources that are associated with the resource.

2020-01-15

All regions

View the information about a resource

Simplified display of non-compliance information

The non-compliance information is structured and displayed in a list. This helps you identify non-compliant configurations with ease.

2020-01-15

All regions

View the compliance evaluation results

December 2019

Feature

Description

Release date

Region

References

Delivery of resource snapshots to Object Storage Service (OSS)

Resource snapshots, including resource change snapshots and scheduled resource snapshots, can be delivered to a specific OSS bucket.

2019-12-30

All regions

Deliver resource data to an OSS bucket

Supported Alibaba Cloud services

Cloud Config is integrated with more Alibaba Cloud services.

2019-12-30

All regions

Alibaba Cloud services and resource types supported by Cloud Config

Release on the international site (alibabacloud.com)

Cloud Config is released for public preview on the international site (alibabacloud.com) and supports all regions outside the Chinese mainland.

2019-12-20

All regions

Cloud Config on the International site (alibabacloud.com)

November 2019

Feature

Description

Release date

Region

References

Custom rules

In addition to the managed rules provided by Cloud Config, custom rules can be created by using Function Compute.

2019-11-10

Regions supported by the China site (aliyun.com)

Definition and execution of custom function rules

October 2019

Feature

Description

Release date

Region

References

Managed rules

Cloud Config provides more managed rules that can be directly used.

2019-10-30

Regions supported by the China site (aliyun.com)

Managed rules

Supported Alibaba Cloud services

Cloud Config is integrated with more Alibaba Cloud services.

2019-10-15

Regions supported by the China site (aliyun.com)

Alibaba Cloud services and resource types supported by Cloud Config

September 2019

Feature

Description

Release date

Region

References

Optimized resource searches

Resources can be filtered by type, region, and compliance status, and searched by resource ID.

2019-09-30

Regions supported by the China site (aliyun.com)

Query a resource

Overview page

The Overview page is provided to display a statistical view of resource distribution, compliance status, and recent changes.

2019-09-20

Regions supported by the China site (aliyun.com)

Overview page in the Cloud Config console

Managed rules

Cloud Config provides more managed rules that can be directly used.

2019-09-20

Regions supported by the China site (aliyun.com)

Managed rules

Continuous compliance evaluation

  • Rules can be created based on compliance requirements to continuously and automatically monitor the compliance of resource configurations.

  • A compliance timeline can be formed for each monitored resource.

  • Each node in the compliance timeline indicates a compliance evaluation and displays the specific evaluation result.

2019-09-15

Regions supported by the China site (aliyun.com)

Definition and execution of rules

August 2019

Feature

Description

Release date

Region

References

Public preview of Cloud Config

  • Resources in all regions are displayed in the console and resources can be searched with high efficiency.

  • Cloud Config tracks resource configuration changes and records the change details to form a configuration timeline for each monitored resource.

  • Each node in the configuration timeline indicates a resource configuration change and displays the change details.

2019-08-31

Regions supported by the China site (aliyun.com)

Overview