AWS Config Service Disabling
This rule detects when AWS Config service components, specifically delivery channels or configuration recorders, are disabled. Adversaries may disable these services to impair an organization's ability to monitor and audit changes within their AWS environment, thereby hindering detection of malicious activities.
Sigma
