Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

Question

Please advise if it is possible to have multiple (limit is 3) delegated administrator for AWS Config setup. This will allow us to demarcate the Config for different environments like Regulated, Unregulated etc in an AWS Organization? I am planning to use 3 different member accounts have the role of delegated administrator account for AWS Config for the specific set of member accounts.
Many thanks

Accepted Answer

AWS Config supports only one [Delegated Administrator](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services_list.html). 
Alternatively, you can use multiple [aggregators](https://docs.aws.amazon.com/config/latest/developerguide/aggregate-data.html) to separate Config data. See here for a [step-by-step](https://docs.aws.amazon.com/config/latest/developerguide/setup-aggregator-console.html) guide to create an aggregator.
This will not distribute permissions to manage Config rules across multiple accounts, but allows to view the resource configuration and compliance data recorded in AWS Config across multiple specified accounts.

Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

相关内容