Your company uses a single AWS Organization with all features enabled and wants AWS Config turned on in every member account and in every Region. Which method achieves this with the least operational effort?

AWS CloudFormation StackSets allow you to deploy CloudFormation stacks across multiple accounts and Regions from a single administrator account, making it the most efficient way to enable AWS Config everywhere with minimal operational effort. A stack instance represents a deployed stack in a specific account and Region. Incorrect options: Stack policies define permissions for updating a stack, not for configuring services. Service control policies (SCPs) restrict permissions but cannot be used to enable or configure services directly. Running a script from the management account using the AWS CLI would work, but it's less automated and scalable than StackSets, requiring more custom scripting and maintenance for ongoing management and new accounts.