More
AWS Foundational Security Best Practice
AWS Config should be enabled
This AWS control checks whether the Config service is enabled in the account for the local region and is recording all resources.