AWS service for monitoring and evaluating AWS resource configurations. Like having an audit system that tracks all changes to your cloud infrastructure.
Compliance teams use AWS Config to ensure all S3 buckets follow security policies and detect unauthorized changes.
AWS Config records resource configuration changes and evaluates them against rules. Azure Policy and GCP Organization Policy focus on enforcing/evaluating policy compliance (often without full per-resource configuration history). OCI Cloud Guard focuses on detecting misconfigurations and risky activity; it overlaps with compliance monitoring but is broader security posture management rather than a pure configuration history service.