# Step 1: Create an Amazon Config connector (optional)
<a name="cloud-connector-create-config-connector"></a>

The Amazon Config connector sets up the credential exchange between Amazon and Azure and enables Amazon Config to record Azure resource state. If you want Amazon Config to record the connector's Azure resources, create the Amazon Config connector before you create the Systems Manager Cloud Connector. Otherwise, skip this step. For more information, see [Amazon Config recording for Cloud Connectors](cloud-connector-config-recording.md).

**Note**  
The Amazon Config connector automatically creates a service-linked role for federation. You do not need to create a separate IAM role for this step.

**To create an Amazon Config connector for Azure**

1. Create the Amazon Config connector. Replace {{TENANT\_ID}} with your Azure tenant ID and {{CLIENT\_ID}} with the **Config Application (Client) ID** — the application (client) ID of the Amazon Config Azure AD app that you noted in the Azure prerequisites (Step 6).

   ```
   aws configservice put-connector \
       --connector-configuration '{
           "azure": {
               "tenantIdentifier": "{{TENANT_ID}}",
               "clientIdentifier": "{{CLIENT_ID}}"
           }
       }'
   ```

   Note the `Arn` from the response — you need it in the next step.

1. Confirm the connector was created:

   ```
   aws configservice list-connectors
   ```