Questions tagged with AWS Control Tower
AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment, called a landing zone.
Content language: English
Filter questions
Select tags to filter
Sort by
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
314 results
I’m enrolling a new account into AWS Control Tower and the Control Tower baseline keeps failing. At the beginning it was with this error:
AWS Control Tower could not enroll your account for the follo...
2
answers
0
votes
19
views
asked 6 days ago
I am using AWS Control Tower in my Management account to create new AWS member accounts. Is it possible to use AWS Control Tower Account Factory for Terraform (AFT) customization to assign AWS IAM Ide...
0
answers
0
votes
34
views
asked 11 days ago
I have an AWS Organizations and AWS Control Tower setup. My control tower uses AWS IAM Identity Center (IDC) which is linked to an External Identity Provider (Entra ID). AWS Control Tower creates prec...
1
answers
0
votes
21
views
asked 11 days ago
Hi all,
I have the following problem:
I have been dealing with a partially failed Control Tower setup with an incomplete account that can't be removed normally.
The account is closed but I want to...
1
answers
0
votes
20
views
asked 12 days ago
I tried to destroy a cloudformation stack that was used to commission a landing zone.
The landing zone was commissioned via a CDK stack (I normally only deploy via CDK). And deployed (correctly???). ...
2
answers
0
votes
27
views
asked 22 days ago
Error Details
- "errorCode": "InvalidParametersException"
- "errorMessage": "AWS Control Tower detected '1' validation errors:Your existing service limits for this AWS account are not sufficient for A...
2
answers
0
votes
56
views
asked a month ago
My case is that we enabled AWS Config and Security Hub for all accounts under the AWS Organization from the management account. We noticed that the cost for AWS Config is increasing in two accounts du...
0
answers
0
votes
32
views
asked a month ago
Dear Team,
As the title, now I'm getting issue when trying to rết Control Tower version 3.2. Our control tower is getting drift after we updated SCP Customer Managed guard rail.
Please kindly help ...
2
answers
0
votes
39
views
asked 2 months ago
Hello,
I am unable to open the AWS Control Tower Setup console page. It stays on the welcome screen without redirecting, and the “Set up landing zone” button is greyed out.
![Enter image description ...
2
answers
0
votes
67
views
asked 2 months ago
Hi all
I'm trying to send session manager logs to an encrypted CloudWatch Log group. I followed the instructions in https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager-loggin...
1
answers
0
votes
118
views
asked 2 months ago
HI all
I just saw the AWS Control Tower KMS Key "aws-controltower/key" in the Control Tower management account automatic key rotation is not enabled. Can I enable it manually? It won't hurt any of AW...
0
answers
0
votes
61
views
asked 2 months ago
Hello,
We have recently setup our Landingzone via control tower and I was wondering if it is common to run into the following issues:
1. When we first attempted to created the LZ it failed becuase t...
2
answers
0
votes
98
views
asked 3 months ago