AWS Control Tower now supports service-linked AWS Config managed Config rules

AWS Control Tower has announced support for service-linked AWS Config managed rules, offering enhanced governance and compliance capabilities:

• Service-linked Config rules are now directly deployed in managed accounts
• Rules are managed entirely by AWS services and cannot be edited by users
• Replaces previous CloudFormation StackSets deployment method
• Provides faster deployment across multiple accounts and regions
• Prevents configuration drift and ensures consistent resource governance

This update improves AWS Control Tower's detective controls by streamlining Config rule deployment and maintaining compliance across AWS environments.