AWS Config Considerations - AWS Control Tower
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

AWS Config Considerations

You have the option to enable AWS Config during initial setup or later as needed. AWS Config is required if you plan to use detective controls in your environment. If you choose to enable AWS Config, you'll need to designate an aggregator account to collect configuration and compliance data. You can either select an existing account or create a new one during setup. Additional options include configuring AWS KMS key encryption and specifying Amazon S3 log retention periods for the recording.