If you no longer need Cloud Config to evaluate resource compliance, you can deactivate Cloud Config.
After you deactivate Cloud Config, the resource configurations, created rules, and compliance evaluation results that are stored in Cloud Config are automatically cleared and cannot be restored. Proceed with caution.
Prerequisites
Make sure all account groups are deleted from your management account. For information about how to delete account groups, see Delete an account group.
Make sure that all members are removed from the account groups by using your management account. For information about how to remove member accounts from an account group, see Modify an account group.
-
If you enabled a tag policy and associated it with Cloud Config, you must first disable any tag policy associated with Cloud Config. Otherwise, the deactivation will not take effect because the system periodically re-enables Cloud Config.
Procedure
Log on to the Cloud Config console.
-
Deactivate Cloud Config.
In the left-side navigation pane, choose Settings > Service Settings. To the right of Monitoring Scope, click Deactivate Service. At the bottom of the page, click Deactivate Cloud Config. In the confirmation dialog box, click Confirm Deactivation. After deactivation, all stored data—including resource configuration baselines, created rules, and compliance results—is permanently deleted and cannot be recovered.
FAQ
Why is Cloud Config re-enabled automatically?
If an active tag policy is linked to Cloud Config, the system periodically enables Cloud Config to run compliance checks required by the policy. Even if you manually deactivate Cloud Config, it will be re-enabled during the next check cycle.
Solution: Go to the tag policy console, disable or delete the tag policies associated with Cloud Config, and then deactivate Cloud Config.