Its a good idea to have a separate compliance AWS account (Similar to Security tooling and Log Archiving) to manage AWS Config. This way we manage the compliance configuration in a proper manner.

Thanks for sharing!