How to view all new resource provisions in AWS

Question

I am trying create a automation based on the new resource provisions in AWS. but i can't find any service/api which helps to view new provisions. I have tried to use CloudTrail to check create APIs. but CloudTrail logs are not enough for my use case.

Is there any service/api for this use case?

Answer 1

You can use the AWS Config or AWS CloudTrail services for this, but, for AWS Config you will need to specify which kind of resource you want to be notified, like the following:

{
    "source": [
        "aws.config"
    ],
    "detail-type": [
        "Config Configuration Item Change"
    ],
    "detail": {
    "messageType": [
        "ConfigurationItemChangeNotification"
    ],
    "configurationItem": {
        "resourceType": [
            "AWS::EC2::Instance"
        ],
        "configurationItemStatus": [
            "ResourceDiscovered"
        ]
    }
    }
}

For more information of how to do this with AWS Config, check this link: Receive custom email notifications when a resource is created with AWS Config

If you want something to check the changes on Console, or other kind of changes you will need to use AWS CloudTrail, together with the AWS Lambda service.

An example can be found here: Get Real-time Alerts When Users Modify AWS Infrastructure

In both you will need a service like AWS SNS to send the notifications.