Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Preferences
Contact Us
Feedback
AWS Documentation
Create an AWS Account

Updating the IAM Role for the customer managed configuration recorder

PDF
RSS
Focus mode
Updating the IAM Role for the customer managed configuration recorder - AWS Config
Updating the IAM Role

You can update the IAM role used by the customer managed configuration recorder. Before you update the IAM role, ensure that you have created a new role to replace the old one. You must attach policies to the new role that grant permissions to AWS Config to record configurations and deliver them to your delivery channel.

For information about creating an IAM role and attaching the required policies to the IAM role, see Step 3: Creating an IAM Role.

Note

To find the ARN of an existing IAM role, go to the IAM console at https://console.aws.amazon.com/iam/. Choose Roles in the navigation pane. Then choose the name of the desired role and find the ARN at the top of the Summary page.

Updating the IAM Role

You can update your IAM role using the AWS Management Console or the AWS CLI.

To update the IAM role (Console)

  1. Sign in to the AWS Management Console and open the AWS Config console at https://console.aws.amazon.com/config/.

  2. Choose Settings in the navigation pane.

  3. On the Customer managed recorder tab, choose Edit on the Settings page.

  4. In the Data governance, section, choose the IAM role for AWS Config:

    • Use an existing AWS Config service-linked role – AWS Config creates a role that has the required permissions.

    • Choose a role from your account – For Existing roles, choose an IAM role in your account.

  5. Choose Save.

To update the IAM role (AWS CLI)

Use the put-configuration-recorder command and specify the Amazon Resource Name (ARN) of the new role:

$ aws configservice put-configuration-recorder --configuration-recorder name=configRecorderName,roleARN=arn:aws:iam::012345678912:role/myConfigRole
anchoranchor

  1. Sign in to the AWS Management Console and open the AWS Config console at https://console.aws.amazon.com/config/.

  2. Choose Settings in the navigation pane.

  3. On the Customer managed recorder tab, choose Edit on the Settings page.

  4. In the Data governance, section, choose the IAM role for AWS Config:

    • Use an existing AWS Config service-linked role – AWS Config creates a role that has the required permissions.

    • Choose a role from your account – For Existing roles, choose an IAM role in your account.

  5. Choose Save.

On this page

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.