Overview
Config DB is a JSON-based configuration management database. It enables you to scrape configuration from several sources on an ongoing basis and navigate that configuration in an easy-to-navigate and search JSON tree.
By doing this, Config DB enables you to view and search the change history of your configuration across multiple dimensions (node, zone, environment, application, technology, etc...) as well as compare and view the differences between configurations across environments.
It is able to scan multiple configuration sources including
- AWS Cloud Resources
- Azure Devops - Azure Devops Pipeline runs
- Files - On a local filesystem, git or HTTP
- Files - Kubernetes - Files inside a running Kubernetes pod
- Kubernetes - Kubernetes resources
- SQL - Data available via queries on MySQL, SQL Server, and Postgres databases
- Trivy - Security scanning of Kubernetes clusters
Each configuration has:
- Configuration - Normally JSON, but XML and properties files are also available
- Insights - Security, cost, performance, and other recommendations from scanners including AWS Trusted Advisor, AWS Config rules, etc...
- Changes - Either change directly on the config (recorded as diff change type) or changes identified via AWS Cloudtrail, etc...
A configuration summary is shown below:
