A global engineering firm has created multiple accounts across multiple regions for global project teams. Some of these accounts are part of AWS Organizations. Compliance officer is looking for configuration and compliance data for resources launched across these accounts. This compliance data should be aggregated in a single region.
Which of the following steps can be performed by the Sysops administrator to complete this task?

Answer options:

A.Create an aggregator in each source region and provide authorization from each source account that is not part of AWS Organizations.
B.Create an aggregator in each source region and provide authorization from each source account part of AWS Organizations.
C.Create an aggregator in a region where all Compliance data needs to be aggregated and provide authorization from each source account that is not part of AWS Organizations.
D.Create an aggregator in a region where all Compliance data needs to be aggregated and provide authorization from each source account that is part of AWS Organizations.

Correct Answer: C
To aggregate compliance data from multiple accounts & multiple regions into a single account, Multi-Account Multi-Region Data Aggregation can be used. For this, an Aggregator needs to be created in a region where aggregated AWS Config configuration and compliance data are required. Aggregator collects compliance data from multiple source accounts and from multiple regions. Source Accounts that are part of AWS Organizations do not require to provide any authorization. Source accounts that are not part of AWS Organizations require authorization which permits Aggregator to collect AWS Config configuration and compliance data.
Option A is incorrect as Aggregator needs to be created in a region where all aggregated compliance data is required, not in all source regions.
Option B is incorrect as Aggregator needs to be created in a region where all aggregated compliance data is required, not in all source regions. Also, authorization is required only for accounts that are not part of AWS Organizations.
Option D is incorrect as Authorization is required only for accounts that are not part of AWS Organizations.
For more information on Multi-Account Multi-Region Data Aggregation with AWS Config, refer to the following URL,
https://docs.aws.amazon.com/config/latest/developerguide/config-concepts.html#multi-account-multi-region-data-aggregation