A central Config aggregator shows noncompliant resources in member accounts. The team assumes the aggregator automatically deploys remediation rules everywhere. Which distinction is correct?

1. Creating an aggregator automatically changes every noncompliant resource to the desired state.
2. An aggregator display name is an IAM permission grant for all member accounts.
3. Deleting noncompliance results fixes the underlying resources.
4. Aggregation centralizes supported configuration and compliance information; rule deployment and remediation still need their own configured mechanisms.