2 Answers
- Newest
- Most votes
- Most comments
0
You can still use a similar process to the one in the solution you mentioned, but you will need to setup multi-account, multi-region data aggregation in AWS Config. See more info here -> https://docs.aws.amazon.com/organizations/latest/userguide/services-that-can-integrate-config.html
answered a year ago
0
Take a look at this Amazon prescriptive guidance pattern -> https://apg-library.amazonaws.com/content/9862df6d-3d3d-482d-b122-04198ed691e2 and this Amazon EventBridge document -> https://docs.aws.amazon.com/eventbridge/latest/userguide/eb-cross-account.html to see if that helps with your notifications with AWS Config aggregators.
answered a year ago
Relevant content
AWS OFFICIALUpdated 2 years ago- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated 3 years ago
- AWS OFFICIALUpdated a year ago
I already enable the trusted access since AWS Organizations for AWS Config, in fact i see the resources of all my accounts in Aggregators -> Resources, but if I try to create an eventbridge event with this JSON: (similar of the solution that mention on the post that i shared that it is in one account) { "source": ["aws.config"], "detail-type": ["Config Configuration Item Change"], "detail": { "messageType": ["ConfigurationItemChangeNotification"], "ConfigurationAggregator": { "ConfigurationAggregatorName": ["aws-controltower-ConfigAggregatorForOrganizations"], "ConfigurationAggregatorArn": ["arn:aws:config:us-east-1:802412677794:config-aggregator/config-aggregator-12v4dgci"] }, "ConfigurationItem": { "configurationItemStatus": ["ResourceDiscovered"], "resourceType": ["AWS::EC2::Instance"] } } } But it doesn't work, so I think EventBridge doesn't support multi-region or multi-account events.