Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

Please advise if it is possible to have multiple (limit is 3) delegated administrator for AWS Config setup. This will allow us to demarcate the Config for different environments like Regulated, Unregulated etc in an AWS Organization? I am planning to use 3 different member accounts have the role of delegated administrator account for AWS Config for the specific set of member accounts. Many thanks

トピック

セキュリティ、アイデンティティ、コンプライアンス管理とガバナンス

タグ

AWS Identity and Access Management AWS Config AWS Organizations AWS アカウントマネジメント

言語

English

Learn_everyday

質問済み 1ヶ月前189ビュー

1回答

新しい順
投票が多い順
コメントが多い順

これらの回答は役に立ちましたか？コミュニティがあなたの知識を活用できるように、正解に賛成票を投じてください。

承認された回答

AWS Config supports only one Delegated Administrator. Alternatively, you can use multiple aggregators to separate Config data. See here for a step-by-step guide to create an aggregator. This will not distribute permissions to manage Config rules across multiple accounts, but allows to view the resource configuration and compliance data recorded in AWS Config across multiple specified accounts.

Michael

回答済み 1ヶ月前

エキスパート

Giovanni Lauria

レビュー済み 1ヶ月前

Learn_everyday
1ヶ月前
Hi, Thanks for your answer. But the tutorial states "The maximum number of delegated admins that the management account can assign for AWS Config (config.amazonaws.com) is 3." What does this indicate?
AWS-User-alantam エキスパート
1ヶ月前
You can have up to 3 delegated admin account. You can just set up different aggregator for each delegated admin to target a different subset of member accounts.

Can we have multiple delegated admins for AWS Config in an AWS Organizaton?

関連するコンテンツ