I have an Organization setup with one account running Security Hub over all the other accounts. When I setup Security Hub I remember I had to setup Config in all my accounts too which I did. I do not want to break Security Hub but I do want to use Config to monitor and report on our resources in use. I am trying to do this from the account that is the aggregate account for both Security Hub and Config.
In Config when I look at Resource Inventory I see a resource count thats not even close to the correct number of resources we have across all accounts. If I search for resources by type like EC2 I get nothing back. If I go in to an account that does have EC2 instances and do the same thing I see the list of instances.
Why is this not working in the aggregate account? When I set this all up I used the CF template Security Hub provided and I verified that all the accounts were connected. And at least for Security Hub it does seem to work and show me results across all the accounts.