You should be authenticated with an AWS account with correct permission with either option (see full documentation):
~/.aws/credentials created via
Multi-account AWS support is available by using an account which can AssumeRole to other accounts.
config.yml you need to specify one or more
role_arn if you want to query multiple accounts in the following way:
accounts:- role_arn: <arn>