Strategic Consolidation of Multiple Landing zones and Networks into a Unified Architecture

1

What is the optimal strategy for consolidating multiple master accounts, each with a unique landing zone and associated VPCs linked to separate Transit Gateways, into a unified landing zone where all VPCs are connected to a single Transit Gateway?

1 Answer
1

Currently its not possible to have multiple control tower accounts under one org, there can be only one of in the management account. I would take below steps:

  1. So if you are looking for unifying all accounts under one management, you can either create a new Control tower account or promote one of the existing account.
  2. enroll your existing accounts - https://docs.aws.amazon.com/controltower/latest/userguide/enroll-account.html
  3. decommission unused management account - https://docs.aws.amazon.com/controltower/latest/userguide/how-to-decommission.html

Next part of unifying Networking - This will be little tricky if you have production workload running. see this - https://docs.aws.amazon.com/vpc/latest/tgw/tgw-best-design-practices.html Also have a look at AWS IPAM for managing your VPC and IPs- https://aws.amazon.com/blogs/mt/using-amazon-ipam-to-enhance-aws-control-tower-governance-for-networking-resources/

Thanks

AWS
answered a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions