Questions tagged with AWS Control Tower
Content language: English
Select up to 5 tags to filter
Sort by most recent
Browse through the questions and answers listed below or filter and sort to narrow down your results.
I received an error "AWS Control Tower failed to set up your landing zone completely: AWS Control Tower is unable to assume the AWSControlTowerExecution role in the account. Add the role to your...
2
answers
0
votes
3129
views
asked a year agolg...
We've configured AWS Control Tower for our organization, and under AWS Control Tower -> Controls library: Categories -> Frameworks I see a number of frameworks we would like to apply.
However, when I...
2
answers
0
votes
639
views
asked a year agolg...
Hi,
is it possible to use Organizational Trail with Control Tower but defining a delegated account?
since Nov 2022...
2
answers
0
votes
803
views
asked a year agolg...
I am using an MDR service called Adlumin that consumes CloudWatch log streams created by my Org CloudTrail log.
Part of that requirement is that my Log files use SSE-KMS encryption, which is not the...
1
answers
0
votes
834
views
asked a year agolg...
AFT Version: 1.9.1
terraform version: 0.15.5
terraform providers: AWS
Description:-
We have deployed control tower and AFT for terraform in a separate AFT account using Terraform, aft version 1.9.1....
3
answers
0
votes
731
views
asked a year agolg...
Customization of Landing zone : AWS Landing Zone Accelerator is failing while creating pipe line.lg...
Did anyone use the AWS accelerator successfully to build the pipeline?
I am trying to customize the landzing zone using AWS accelerator, used Control Tower for prerequisites.
I am following steps...
1
answers
1
votes
455
views
asked a year agolg...
Hi, I created a new account and then immediately went to creating control tower. Everything seemed to work except I have this error:
Error
"AWS Control Tower failed to set up your landing zone...
2
answers
0
votes
2050
views
asked a year agolg...
For example,
- I created a account, "ABC", through account factory with a control tower vpc with no public internet access.
- I modified account factory vpc to HAVE public internet access
- I...
1
answers
0
votes
335
views
asked a year agolg...
I have a log use case and I'm looking for a best practice in the context of Control Tower.
With Control Tower we have an org level cloud trail that consolidates CloudTrail logs into our logging...
2
answers
0
votes
297
views
asked a year agolg...
Can I create my own proactive controls for control tower? If so do they have to be created with Cloudforamtion guard, Cloudforamtion hooks or both?
1
answers
0
votes
513
views
asked a year agolg...
I created a management account and proceeded to create landing zone through control tower. Opted for most default options except KMS encryption with single region. The creation process part succeeded...
3
answers
1
votes
2681
views
asked a year agolg...
I'm looking for best practice guidance on removing accounts from Control Tower and dealing with stack instances.
In my management account I have CfCT setup. If I understand correctly, I need to...
3
answers
0
votes
440
views
asked a year agolg...