使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

0

Please advise if it is possible to have multiple (limit is 3) delegated administrator for AWS Config setup. This will allow us to demarcate the Config for different environments like Regulated, Unregulated etc in an AWS Organization? I am planning to use 3 different member accounts have the role of delegated administrator account for AWS Config for the specific set of member accounts. Many thanks

主題
安全性、身分識別與合規管理與治理
標籤
AWS Identity and Access ManagementAWS ConfigAWS OrganizationsAWS Account Management
語言
English
Learn_everyday
已提問 1 個月前檢視次數 189 次
1 個回答
0
已接受的答案

AWS Config supports only one Delegated Administrator. Alternatively, you can use multiple aggregators to separate Config data. See here for a step-by-step guide to create an aggregator. This will not distribute permissions to manage Config rules across multiple accounts, but allows to view the resource configuration and compliance data recorded in AWS Config across multiple specified accounts.

profile pictureAWS
Michael
已回答 1 個月前
profile picture
專家
Giovanni Lauria
已審閱 1 個月前
  • Learn_everyday
    1 個月前

    Hi, Thanks for your answer. But the tutorial states "The maximum number of delegated admins that the management account can assign for AWS Config (config.amazonaws.com) is 3." What does this indicate?

  • AWS-User-alantam 專家
    1 個月前

    You can have up to 3 delegated admin account. You can just set up different aggregator for each delegated admin to target a different subset of member accounts.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容