Security needs a single compliance view of AWS Config rule evaluations across ALL accounts and regions in the organization. What aggregates this?
A.AWS Config aggregator — collects config + compliance data from org accounts into one account
Correct. Native org-wide Config rollup.
B.CloudTrail organization trail
Trails log API calls — different data.
C.Consolidated billing
Billing isn't configuration compliance.
D.Per-account dashboards emailed weekly
Manual aggregation — error-prone and stale.
Why this answer
Config aggregators are the multi-account/multi-region rollup for configuration and compliance data — org-wide rule evaluation results land in the aggregator account. Org trails centralize API logs, not compliance evaluations.
Correct answer: A · Last reviewed 2026-11-04
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Logging & Audit practice session.
Practice Logging & Audit