Provision and manage accounts with Account Factory - AWS Control Tower

Provision and manage accounts with Account Factory

This chapter includes an overview and procedures for provisioning new member accounts in an AWS Control Tower landing zone with Account Factory.

Considerations for managing accounts in Account Factory

You can update, unmanage, and close accounts that you create and provision through Account Factory. You can recycle accounts by updating the user parameters in the accounts that you want to repurpose. You can also change an account's organizational unit (OU).


When updating a provisioned product that's associated with an account that Account Factory vends, if you specify a new user email address for AWS IAM Identity Center, AWS Control Tower creates a new user in IAM Identity Center. The previously created account isn't removed. For information about removing the previous IAM Identity Center user email address from IAM Identity Center, see Disabling a User.