16-02 AWS Control Tower
# AWS Control Tower
#aws-service
AWS Control Tower helps Enterprises quickly set-up a secure, AWS multi-account. Provides you with a baseline environment to get started with a multi-account architecture
# Landing Zone
A landing zone is a baseline environment following well-architected and best practices to start launching production ready workloads.
- AWS SSO enabled, Centralized logging for AWS CloudTrail, cross-account security auditing
# Account Factory
- automates provisioning of new accounts in your organization
- standardize the provisioning of new accounts with pre-approved account configurations
- configure your account factory with pre-approved network configuration and region selections
- enable self-service for your builders to configure and provision new accounts using AWS Service Catalog
# Guardrails
- pre-packaged governance rules for security, operations, and compliance that customers can select and apply enterprise-wide or to specific groups of accounts
Note
AWS Control Tower is the replacement for retired AWS Landing Zones