thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Intermediate

AWS Control Tower

AWS service that sets up and governs a secure multi-account landing zone using AWS Organizations and best-practice controls.

Definition

Control Tower automates creation of a landing zone with log archive and audit accounts, Account Factory for provisioning new accounts, and controls (guardrails) that are preventive (SCPs/RCPs), detective (AWS Config rules) or proactive (CloudFormation hooks). A dashboard reports compliance across accounts.

Example

A new enterprise uses Control Tower to stand up 20 accounts with centralized logging and mandatory guardrails in a day.

Exam tip

Control Tower is the answer for quickly establishing a governed multi-account environment following AWS best practices.

Related terms