AWS re:Post을(를) 사용하면 다음에 동의하게 됩니다. AWS re:Post 이용 약관

Disabling AWS Config before moving account to Organization with ControlTower set up

0

We are currently in the process of migrating old accounts to a new AWS Organization. The new Organization is set up with Control Tower, which means all accounts in the Organization automatically have a Config recorder configured from the top down. The old accounts have their own Config recorders configured on a per-account basis.

Should the Config records in the accounts to be migrated be deleted before migrating the account to the new Organization?

질문됨 일 년 전763회 조회
2개 답변
2
수락된 답변

If you plan to bring existing AWS accounts into AWS Control Tower as Audit and Log archive accounts, and if those accounts have existing AWS Config resources, you must delete the existing AWS Config resources completely, before you can enroll these accounts into AWS Control Tower for this purpose. For accounts that are not intended to become Audit and Log archive accounts, you can modify the existing Config resources.

This blog covers the process of enrolling accounts with existing config resources - https://docs.aws.amazon.com/controltower/latest/userguide/existing-config-resources.html

AWS
전문가
답변함 일 년 전
profile picture
전문가
검토됨 6달 전
1

It is recommended that the existing accounts being enrolled does not have an AWS Config configuration recorder or delivery channel. These may be deleted or modified through the AWS CLI before you can enroll an account. Please refer for more details: https://docs.aws.amazon.com/controltower/latest/userguide/enrollment-prerequisites.html

profile pictureAWS
답변함 일 년 전
profile picture
전문가
검토됨 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠