Abstract: A configuration management service provides data identifying its subscribers to a secure sharing service that executes in an account that has a higher security level than a service account used to provide the configuration management service. The secure sharing service securely determines whether each subscriber has authorized producer services to share resource configuration data with the configuration management service. If a subscriber has authorized such sharing, information identifying the subscriber can be stored in a location accessible to the producer services. If a subscriber has not authorized such sharing, the secure sharing service will not make the subscriber's information available to the producer services. The producer services can use the subscriber data to provide resource configuration data to the configuration management service only for those subscribers that subscribe to both the configuration management service and to the producer services.

Abstract: This disclosure describes techniques for a configuration-monitoring service of a service provider network to provide users with the ability to access to configuration data across multiple accounts using a single account or other centralized access point. The configuration-monitoring service may allow users with multiple accounts registered with the service provider network to designate a central account (or “aggregator account”) through which the users can access and review configuration data across multiple accounts (or “source accounts”) and/or multiple regions (or “source regions”). After determining an aggregator account, the configuration-monitoring service may begin collecting configuration data from the source accounts and/or source regions, and transporting the configuration data to the aggregator region to be accessed using the aggregator account.