AWS Control Tower endpoints and quotas
To connect programmatically to an AWS service, you use an endpoint. AWS services offer the following endpoint types in some or all of the AWS Regions that the service supports: IPv4 endpoints, dual-stack endpoints, and FIPS endpoints. Some services provide global endpoints. For more information, see AWS service endpoints.
Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.
The following are the service endpoints and service quotas for this service.
Service Endpoints
AWS Control Tower has the following endpoints:
| Region Name | Region | Endpoint | Protocol |
|---|---|---|---|
| US East (Ohio) | us-east-2 |
controltower.us-east-2.amazonaws.com controltower-fips.us-east-2.api.aws controltower-fips.us-east-2.amazonaws.com controltower.us-east-2.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| US East (N. Virginia) | us-east-1 |
controltower.us-east-1.amazonaws.com controltower-fips.us-east-1.api.aws controltower-fips.us-east-1.amazonaws.com controltower.us-east-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| US West (N. California) | us-west-1 |
controltower.us-west-1.amazonaws.com controltower-fips.us-west-1.api.aws controltower-fips.us-west-1.amazonaws.com controltower.us-west-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| US West (Oregon) | us-west-2 |
controltower.us-west-2.amazonaws.com controltower-fips.us-west-2.api.aws controltower-fips.us-west-2.amazonaws.com controltower.us-west-2.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| Africa (Cape Town) | af-south-1 |
controltower.af-south-1.amazonaws.com controltower.af-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hong Kong) | ap-east-1 |
controltower.ap-east-1.amazonaws.com controltower.ap-east-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Hyderabad) | ap-south-2 |
controltower.ap-south-2.amazonaws.com controltower.ap-south-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Jakarta) | ap-southeast-3 |
controltower.ap-southeast-3.amazonaws.com controltower.ap-southeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Malaysia) | ap-southeast-5 |
controltower.ap-southeast-5.amazonaws.com controltower.ap-southeast-5.api.aws |
HTTPS HTTPS |
| Asia Pacific (Melbourne) | ap-southeast-4 |
controltower.ap-southeast-4.amazonaws.com controltower.ap-southeast-4.api.aws |
HTTPS HTTPS |
| Asia Pacific (Mumbai) | ap-south-1 |
controltower.ap-south-1.amazonaws.com controltower.ap-south-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Osaka) | ap-northeast-3 |
controltower.ap-northeast-3.amazonaws.com controltower.ap-northeast-3.api.aws |
HTTPS HTTPS |
| Asia Pacific (Seoul) | ap-northeast-2 |
controltower.ap-northeast-2.amazonaws.com controltower.ap-northeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Singapore) | ap-southeast-1 |
controltower.ap-southeast-1.amazonaws.com controltower.ap-southeast-1.api.aws |
HTTPS HTTPS |
| Asia Pacific (Sydney) | ap-southeast-2 |
controltower.ap-southeast-2.amazonaws.com controltower.ap-southeast-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Taipei) | ap-east-2 |
controltower.ap-east-2.amazonaws.com controltower.ap-east-2.api.aws |
HTTPS HTTPS |
| Asia Pacific (Thailand) | ap-southeast-7 |
controltower.ap-southeast-7.amazonaws.com controltower.ap-southeast-7.api.aws |
HTTPS HTTPS |
| Asia Pacific (Tokyo) | ap-northeast-1 |
controltower.ap-northeast-1.amazonaws.com controltower.ap-northeast-1.api.aws |
HTTPS HTTPS |
| Canada (Central) | ca-central-1 |
controltower.ca-central-1.amazonaws.com controltower-fips.ca-central-1.api.aws controltower-fips.ca-central-1.amazonaws.com controltower.ca-central-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| Canada West (Calgary) | ca-west-1 |
controltower.ca-west-1.amazonaws.com controltower-fips.ca-west-1.api.aws controltower-fips.ca-west-1.amazonaws.com controltower.ca-west-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| Europe (Frankfurt) | eu-central-1 |
controltower.eu-central-1.amazonaws.com controltower.eu-central-1.api.aws |
HTTPS HTTPS |
| Europe (Ireland) | eu-west-1 |
controltower.eu-west-1.amazonaws.com controltower.eu-west-1.api.aws |
HTTPS HTTPS |
| Europe (London) | eu-west-2 |
controltower.eu-west-2.amazonaws.com controltower.eu-west-2.api.aws |
HTTPS HTTPS |
| Europe (Milan) | eu-south-1 |
controltower.eu-south-1.amazonaws.com controltower.eu-south-1.api.aws |
HTTPS HTTPS |
| Europe (Paris) | eu-west-3 |
controltower.eu-west-3.amazonaws.com controltower.eu-west-3.api.aws |
HTTPS HTTPS |
| Europe (Spain) | eu-south-2 |
controltower.eu-south-2.amazonaws.com controltower.eu-south-2.api.aws |
HTTPS HTTPS |
| Europe (Stockholm) | eu-north-1 |
controltower.eu-north-1.amazonaws.com controltower.eu-north-1.api.aws |
HTTPS HTTPS |
| Europe (Zurich) | eu-central-2 |
controltower.eu-central-2.amazonaws.com controltower.eu-central-2.api.aws |
HTTPS HTTPS |
| Israel (Tel Aviv) | il-central-1 |
controltower.il-central-1.amazonaws.com controltower.il-central-1.api.aws |
HTTPS HTTPS |
| Mexico (Central) | mx-central-1 |
controltower.mx-central-1.amazonaws.com controltower.mx-central-1.api.aws |
HTTPS HTTPS |
| Middle East (Bahrain) | me-south-1 |
controltower.me-south-1.amazonaws.com controltower.me-south-1.api.aws |
HTTPS HTTPS |
| Middle East (UAE) | me-central-1 |
controltower.me-central-1.amazonaws.com controltower.me-central-1.api.aws |
HTTPS HTTPS |
| South America (São Paulo) | sa-east-1 |
controltower.sa-east-1.amazonaws.com controltower.sa-east-1.api.aws |
HTTPS HTTPS |
| AWS GovCloud (US-East) | us-gov-east-1 |
controltower.us-gov-east-1.amazonaws.com controltower-fips.us-gov-east-1.api.aws controltower-fips.us-gov-east-1.amazonaws.com controltower.us-gov-east-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
| AWS GovCloud (US-West) | us-gov-west-1 |
controltower.us-gov-west-1.amazonaws.com controltower-fips.us-gov-west-1.api.aws controltower-fips.us-gov-west-1.amazonaws.com controltower.us-gov-west-1.api.aws |
HTTPS HTTPS HTTPS HTTPS |
Service Quotas
AWS Control Tower has the following quotas.
| Name | Default | Adjustable | Description |
|---|---|---|---|
| Concurrent account operations quota | Each supported Region: 5 |
Yes |
The maximum number of concurrent account operations that can be performed at the same time. Maximum: 10 |
| Concurrent organization units (OUs) operations quota | Each supported Region: 1 | No | The maximum number of concurrent OU-related operations that can be performed at the same time. |
| Number of accounts in a single OU quota | Each supported Region: 1,000 | No | The maximum number of AWS Control Tower managed accounts that can be present in one OU. If you add accounts beyond this limit, the OU registration process in AWS Control Tower cannot be performed. To learn more about the number of accounts per OU, review Regions and Stackset Limitations in the AWS Control Tower documentation. |
