AWS Control Tower

· 1 min read · AWS

AWS Control Tower automates the creation of a multi-account landing zone on top of AWS Organizations: a management account, log archive and audit accounts, an organizational structure, preventive guardrails implemented as service control policies and detective guardrails implemented with AWS Config. Account Factory creates new accounts that follow the baseline, and Account Factory for Terraform (AFT) lets you request them from a pipeline.

It has no extra charge itself, but the services that it enables (Config, CloudTrail, S3) do. Compare building your own with Terraform.

#AWS #Security