AWS Config Considerations

You have the option to enable AWS Config during initial setup or later as needed. AWS Config is required if you plan to use detective controls in your environment. If you choose to enable AWS Config, you'll need to designate an aggregator account to collect configuration and compliance data. You can either select an existing account or create a new one during setup. Additional options include configuring AWS KMS key encryption and specifying Amazon S3 log retention periods for the recording.