Configuration Update Management in AWS Control Tower