Ravi Sir's Cards › AWS
What is Control Tower?
This revision card explains What is Control Tower? It starts from the need that building a secure multi-account landing zone by hand takes weeks of CFN and IAM. It describes control Tower sets up a landing zone — OUs, baseline guardrails, logging/audit accounts, and Account Factory. The how-to section notes launch Control Tower in a clean management account; create accounts via Account Factory into OUs. An example on the card is new account inherits logging to the Log Archive account and guardrail status in the console.
Read card text
What this card says
Why do we need it?
Building a secure multi-account landing zone by hand takes weeks of CFN and IAM.
What is it?
Control Tower sets up a landing zone: OUs, baseline guardrails, logging/audit accounts, and Account Factory.
Account Factory
How to do it
Launch Control Tower in a clean management account; create accounts via Account Factory into OUs.
Example
New account inherits logging to the Log Archive account and guardrail status in the console.