You can now use AWS Config to record configuration changes to AWS Key Management Service (KMS) keys and Amazon Elasticsearch Service domains. You can view the metadata associated with an AWS KMS key and track changes to key policies, tags, and other configuration attributes associated with the AWS KMS key. Similarly, for Amazon Elasticsearch Service domains, you can track configuration changes such as changes to instance type, encryption settings, network configuration, and access policies.

from Recent Announcements