AWS Control Tower - Custom baseline for new accounts

Hello.

I would like to know if as a part of aws accounts creation, it is possible to add custom baseline such as:

-Deploy automatically config rules or something automations to add s3 buckets for access logs in every account, and then to replicate to centralized bucket in log archive account. -Add groups/users and permission set to every new account

Also, by default management account does not have AWS config recording enable like member accounts, how can I enable AWS Config with all configuration needed similar to others member accounts have?

Thank you.