SecurityConfig / AwsConfig / AwsConfigAggregation

AWS Config Aggregation Configuration Not used in Control Tower environment Aggregation will be configured in all enabled regions unless specifically excluded If the delegatedAdmin account is not provided config will be aggregated to the management account

AWS Config Aggregation with a delegated admin account:

aggregation:
enable: true
delegatedAdminAccount: LogArchive

AWS Config Aggregation in the management account:

configAggregation:
enable: true