Which AWS service enables you to create custom rules for resource compliance monitoring?

AWS Config is the service designed specifically for resource compliance monitoring in AWS. It allows you to define and manage rules that assess the compliance of your AWS resources against desired configurations. By creating custom rules, you can monitor whether resources are in accordance with your organization’s policies or regulatory requirements.

With AWS Config, you can track changes to AWS resources and evaluate their configurations against the rules you set. This makes it a key tool for ensuring that your infrastructure complies with internal and external guidelines. Furthermore, AWS Config provides historical information, which allows organizations to conduct audits and respond to compliance checks efficiently.

Other services mentioned serve different purposes: AWS CloudFormation is used for infrastructure as code to create and manage AWS resources, AWS CloudTrail records API calls and events for security auditing and compliance, while AWS Inspector is focused on assessing the security of applications by identifying vulnerabilities. Each of these plays a role in security and compliance but does not provide the same level of customizability and focus on resource compliance monitoring as AWS Config.