Introducing AWS Config multi-account, multi-region support for advanced query
AWS Config launched advanced query last year, which makes it easy to query the resource configuration properties of your AWS resources for audit, compliance, or operational troubleshooting using simple SQL-like queries. With today’s launch, you can now use advanced query with configuration aggregators, enabling you to run the same queries across accounts and Regions. This provides you an easy mechanism to query your entire AWS footprint from a central account and get relevant information about your resources. For example, using this query capability, you can retrieve a list of Amazon Elastic Compute Cloud (Amazon EC2) instances of a particular size, Amazon Elastic Block Store (Amazon EBS) volumes that are not attached to an Amazon EC2 instance, or resources that have encryption disabled. This capability works across accounts, Regions, and organizations in AWS Organizations.