Control Tower Setup

Suspended accounts cannot be enrolled into AWS Control Tower. I recommend you move the account(s) from the Security OU to a new OU (i.e. "Suspended"), and try again. You must supply a unique email address for each account during setup, either new or existing. If you choose to have AWS Control Tower create new shared accounts for you, the email addresses must not already have associated AWS accounts.