You are configuring an aggregator to collect AWS Config configuration & compliance data using the AWS Config console. These data need to be captured from resources deployed in multiple regions & part of multiple accounts. Some of these accounts are part of the AWS Organizations.
What additional permissions are required to capture this data?

Answer options:

A.Allow data replication to replicate data from AWS Config Configuration recorder to Aggregator account.
B.Allow data replication to replicate data from source account to Management account in an Organization which will push data to the aggregator.
C.Allow data replication to replicate data from one region to another region where an aggregator is deployed.
D.Allow data replication to replicate data from source accounts to aggregator accounts.

Correct Answer: D
An Aggregator resource type is used to collect AWS Config configuration & compliance data from multiple regions & accounts. While configuring Aggregator, data replication needs to be allowed which allows AWS config permission to replicate data from source account to aggregator account.
Option A is incorrect as data is not required to be replicated between AWS Config Configuration recorder & Aggregator for aggregating data across multiple regions.
Option B is incorrect as data is not required to be replicated between source account & management account in AWS Organizations for aggregating data across multiple regions.
Option C is incorrect as additional permission for replicating data within regions is not required.
For more information on configuring AWS Config Aggregator, refer to the following URL,
https://docs.aws.amazon.com/config/latest/developerguide/setup-aggregator-console.html