Usando AWS re:Post, accetti AWS re:Post Termini di utilizzo
AWS re:Postre:Post

Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

0

Please advise if it is possible to have multiple (limit is 3) delegated administrator for AWS Config setup. This will allow us to demarcate the Config for different environments like Regulated, Unregulated etc in an AWS Organization? I am planning to use 3 different member accounts have the role of delegated administrator account for AWS Config for the specific set of member accounts. Many thanks

Argomenti
Sicurezza, identità e conformitàGestione e amministrazione
Tag
Gestione identità e accesso AWSAWS ConfigOrganizzazioni AWSGestore account AWS
Lingua
English
Learn_everyday
posta un mese fa189 visualizzazioni
1 Risposta
0
Risposta accettata

AWS Config supports only one Delegated Administrator. Alternatively, you can use multiple aggregators to separate Config data. See here for a step-by-step guide to create an aggregator. This will not distribute permissions to manage Config rules across multiple accounts, but allows to view the resource configuration and compliance data recorded in AWS Config across multiple specified accounts.

profile pictureAWS
Michael
con risposta un mese fa
profile picture
ESPERTO
Giovanni Lauria
verificato un mese fa
  • Learn_everyday
    un mese fa

    Hi, Thanks for your answer. But the tutorial states "The maximum number of delegated admins that the management account can assign for AWS Config (config.amazonaws.com) is 3." What does this indicate?

  • AWS-User-alantam ESPERTO
    un mese fa

    You can have up to 3 delegated admin account. You can just set up different aggregator for each delegated admin to target a different subset of member accounts.

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande

Contenuto pertinente