FAQ

This section provides answers to commonly raised questions about designing an AWS Control Tower landing zone.

Q. How can I use this guide in my design document?

A. You can replicate different sections in this guide and use it as a template for your design document. You can also adapt the tables and diagrams in this guide to your specific requirements and configurations.

Q. Where can I find more information about AWS Control Tower?

A. For sample features, FAQs, and pricing, see the AWS Control Tower web pages. For the user guide, best practices, and tutorials, see the AWS Control Tower documentation.

Q. How can I get started with AWS Control Tower?

A. Use the AWS Control Tower Workshop to set up your AWS Control Tower landing zone.

Q. Where can I find architectures for AWS Control Tower?

A.Visit the AWS Architecture Blog, which has an AWS Control Tower category that provides different architectural solutions and customizations.

Q. How can I further customize my AWS Control Tower landing zone?

A. You can use the Customizations for AWS Control Tower or Landing Zone Accelerator solution to customize your AWS Control Tower landing zone. To customize the accounts provisioned, you can use the Account Factory Customization (AFC) or the Account Factory for Terraform (AFT) solution. For additional solutions that you can integrate with AWS Control Tower, see AWS Control Tower in AWS Marketplace.

Q. Where can I find up-to-date information about all AWS Control Tower controls?

A. For complete information about current controls, see Controls reference guide in the AWS Control Tower documentation.

Q. How can I automate operations in AWS Control Tower?

A. AWS Control Tower provides an API that exposes some of the most commonly used operations such as enabling or disabling controls, or provisioning or closing accounts. For more information, see Automate tasks in AWS Control Tower in the AWS Control Tower documentation.

Q. Where can I find more best practices for architecting multi-account environments on AWS?

A. See the white paper Organizing Your AWS Environment Using Multiple Accounts for additional guidance.

Q. Where can I find more best practices for designing a secure landing zone?

A. See the AWS Security Reference Architecture for best practices for building a secure landing zone.