Questions tagged with AWS Control Tower
AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment, called a landing zone.
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
325 results
I have an existing Organisation and I am trying to set up Control Tower.
I am getting following error in my dashboard:
```
Error
AWS Control Tower failed to deploy one or more stack set instances: S...
4
answers
0
votes
122
views
asked 2 months ago
I work in a cloud lab rental company that provides temporary AWS environments for students to practice and learn. We use AWS Control Tower for multi-account management with the following architecture:...
2
answers
-2
votes
135
views
asked 3 months ago
Recently I hit an error similar to a [recent issue](https://repost.aws/questions/QU7YS8sPTFTD65xKenzbCFag/account-lambda-memory-limit-stuck-at-3008) where my new accounts are hitting a memory limit on...
2
answers
-1
votes
89
views
asked 4 months ago
I am trying to decommission an AWS Control Tower Landing Zone, but the process fails with the following error:
AWS Control Tower has failed to decommission your landing zone.
An error occurred while ...
1
answers
-1
votes
42
views
asked 4 months ago
Hi all
I am encountering a `Bucket access denied` error in the `aws-controltower-BaselineCloudTrail` cloudtrail, specifically affecting only a subset of member accounts. While several other accounts ...
2
answers
0
votes
78
views
asked 5 months ago
**Background**: AWS Control Tower was deployed in an existing AWS Organization with 100s of AWS account. The AWSControlTowerExecution role was rolled out in bulk using AWS CloudFormation stackset in d...
2
answers
0
votes
214
views
asked 6 months ago
I tried following the steps: herehttps://repost.aws/questions/QUx25XcQFaQNic0VkqCu3bBw/how-can-i-properly-modify-a-bucket-managed-by-control-tower
However, after creating this role to assume and assi...
5
answers
0
votes
151
views
asked 6 months ago
**Problem:**
I have an S3 bucket that was created and is managed by AWS Control Tower
**Solution:**
I need a solution that will allow me to modify the bucket just to change some of the S3 bucket poli...
1
answers
0
votes
154
views
asked 6 months ago
What's the best way to achieve this?
**Problem:** I have a situation where I have an external service that is ingesting logs from conrol tower s3 bucket, previously, It was recommended by one o repl...
3
answers
0
votes
196
views
asked 6 months ago
**Problem**:
I have a AWS environment that utilizes Control Tower, it previously automatically created a Log Archive Account. Within this account.
I need to modify the existing Control Tower S3 buck...
2
answers
0
votes
306
views
asked 6 months ago
I see the previous error while upgrading cotnrol tower & i noticed also the control tower aneable the aws config only for the member account with ohio region ince the home region in the control tower ...
3
answers
0
votes
379
views
asked 7 months ago
I’m enrolling a new account into AWS Control Tower and the Control Tower baseline keeps failing. At the beginning it was with this error:
AWS Control Tower could not enroll your account for the follo...
2
answers
0
votes
233
views
asked 7 months ago