AWS Control Tower Flashcards
Explain what AWS Control Tower?
AWS Control Tower is a service that helps set up and govern a secure, multi-account AWS environment based on best practices.
It automates account provisioning using AWS Organizations and Account Factory.
It enforces guardrails (pre-configured policies) for security, compliance, and operations.
It provides a dashboard to monitor compliance across accounts.
Ideal for enterprises needing consistent governance in a multi-account setup.
How can I manage AWS accounts in AWS Control Tower?
AWS has a feature called the account factory that enables you to create new accounts and add them to your organization.
What are the two types of guardrails available in AWS Control Tower?
AWS Control Tower has two types of guardrails:
- Preventative - Enables you to disallow certain actions from occurring across your accounts
- Detective - Used for detecting whether a say MFA for root user is enabled
How can you determine if certain accounts and resources are in compliance or not in AWS?
AWS Control Tower has guardrails that enable you to analyze if, for example, tags have been applied to resources or if any other resources are in or out of compliance.
