Permissions for the IAM Role Assigned to AWS Config - AWS Config

Grant AWS Config permission to record resources in your account with an IAM role.