AWS Config #

Advanced queries #

Find all changes on AWS WAFs and security groups #

SELECT
  configurationItemCaptureTime,
  resourceName,
  resourceType,
  resourceId
WHERE
  configurationItemCaptureTime > '2022-04-01'
  and (
    resourceType like 'AWS::WAF%'
    or resourceType like 'AWS::EC2::SecurityGroup%'
  )
ORDER BY
  configurationItemCaptureTime desc