AWS Control Tower
#156 · Level 4 · Operations and specialized areas · Governance, multi-account and costConcept
Section titled “Concept”AWS Control Tower builds a ready-made structure of many accounts with safe rules, called a landing zone. It is built on top of AWS Organizations. A landing zone has separate accounts for collecting logs and for security audits. Rules called controls block some actions, and catch some rule violations. With Account Factory, new accounts are created already following these rules.
Simple example
Section titled “Simple example”A new housing area — roads, gates, security and rules are all ready in advance; new houses just have to be built following the rules.
Why it’s needed
Section titled “Why it’s needed”Setting up Organizations, security rules and logs all by hand takes time and leads to mistakes.
Where it’s used
Section titled “Where it’s used”Building a safe structure at the start of a big company’s AWS journey, and creating new accounts that follow the rules.
Azure equivalent
Section titled “Azure equivalent”Azure Landing Zones
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: