Keep previous CloudShell session and verify the trusted relationships have been correctly established by running the following command:
aws organizations list-aws-service-access-for-organization
The output should include the following values:
{
"EnabledServicePrincipals": [
{
"ServicePrincipal": "config-multiaccountsetup.amazonaws.com",
"DateEnabled": "2025-05-24T16:14:01.992000+07:00"
},
{
"ServicePrincipal": "config.amazonaws.com",
"DateEnabled": "2025-05-24T16:15:21.780000+07:00"
},
{
"ServicePrincipal": "member.org.stacksets.cloudformation.amazonaws.com",
"DateEnabled": "2025-05-24T16:22:41.608000+07:00"
}
]
}