You can now record configuration changes to AWS Shield using AWS Config. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS. With Config, you can track changes to the protection settings, such as the resources being protected, and use this information to maintain a configuration change history for audit and operational troubleshooting purposes.