AWS Config is a fully managed service that provides you with a detailed inventory of your AWS resources and their current configurations. This service also records your configuration history and notifies you when your configurations change.
Config Rules allows you to script rules that will automatically checks the configuration of your AWS resources. Config Rules can only check configurations associated with resources recorded in AWS Config.
Cloud Conformity monitors AWS Config following the following rules: