Short description
-----------------

AWS Config aggregators are configured with AWS account IDs or AWS Organizations account IDs. You must specify the [AWS Region](https://docs.aws.amazon.com/awsconsolehelpdocs/latest/gsg/select-region.html) for the aggregate data. If your aggregator source account is your AWS Organizations account, then authorization isn't required. If your aggregator source account is an individual AWS account, then authorization is required.

**Note:** To collect data from an Organizations account, the [aggregator must be created](https://docs.aws.amazon.com/config/latest/developerguide/setup-aggregator-console.html) from the [management account](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html#term) or delegated administrator for AWS Config in that Region.

Resolution
----------

Follow these instructions to add authorization to aggregator accounts with the AWS Config console or the AWS Command Line Interface (AWS CLI).

**Important:** Before you begin, be sure that the AWS CLI is [installed](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-install.html) and [configured](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html). If you [receive errors with AWS CLI commands](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-troubleshooting.html), then make sure to use the most recent version of the AWS CLI. Be sure that AWS Config and the AWS Config rules are set up in the same [AWS Region](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints) as the source account.

### AWS Config console

Follow the instructions to [add authorization for Aggregator accounts and Regions](https://docs.aws.amazon.com/config/latest/developerguide/authorize-aggregator-account-console.html#add-authorization-console).

### AWS CLI

Follow the instructions for [authorizing aggregator accounts to collect AWS Config configuration and compliance data using the AWS Command Line Interface](https://docs.aws.amazon.com/config/latest/developerguide/authorize-aggregator-account-cli.html).

**Note**: If you select multiple AWS Regions during aggregator set up, then be sure to authorize the aggregator request for each Region.

For more information, see [Authorizing Aggregator Accounts to Collect AWS Config Configuration and Compliance Data Using the Console](https://docs.aws.amazon.com/config/latest/developerguide/authorize-aggregator-account-console.html).

Related information
-------------------

[Authorize a pending request for an aggregator account](https://docs.aws.amazon.com/config/latest/developerguide/authorize-aggregator-account-console.html#authorization-pending-request-console)

[How can I troubleshoot AWS Config console error messages?](https://repost.aws/knowledge-center/config-console-error)

Thank you for your comment. We'll review and update the Knowledge Center article as needed.

I followed the instructions to set up an aggregator with AWS Config. However, no data was collected by the aggregator, or I received an error similar to the following: AWS Config does not have permission from the source account to replicate data into an aggregator account. Authorize aggregator account to replicate data from source accounts and region.

Add authorization for aggregator accounts with AWS Config

Why is my AWS Config data not collected by the aggregator for my AWS account or AWS Organizations account?

Why is my AWS Config data not collected by the aggregator for my AWS account or AWS Organizations account?

Short description

Resolution

AWS Config console

AWS CLI

Related information

Relevant content