Documentation
README
Ensure AWS Config is Enabled for Lambda and Serverless
Description
With AWS Config, you can track configuration changes to the Lambda functions (including deleted functions), runtime environments, tags, handler name, code size, memory allocation, timeout settings, and concurrency settings, along with Lambda IAM execution role, subnet, and security group associations.
Rationale
This gives you a holistic view of the Lambda function's lifecycle and enables you to surface that data for potential audit and compliance requirements.
Impact
Enabling AWS Config for Lambda may incur additional AWS Config costs depending on the number of configuration items recorded and the number of active rules.
Audit Procedure
Using AWS Console
This is the opening of the README. Read the full README on GitHub.