Policy: AWSConfigMultiAccountSetupPolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AWSConfigMultiAccountSetupPolicy Allowed Actions Actions Services config:DeleteConfigRule config config:DeleteConformancePack config config:DescribeConfigurationRecorders config config:DescribeConformancePackStatus config config:PutConfigRule config config:PutConformancePack config iam:CreateServiceLinkedRole iam iam:GetRole iam iam:PassRole iam organizations:DescribeAccount organizations organizations:DescribeOrganization organizations organizations:ListAWSServiceAccessForOrganization organizations organizations:ListAccounts organizations