Permissions for the IAM Role Assigned to AWS Config - AWS Config
Grant AWS Config permission to record resources in your account with an IAM role.