You can use the AWS Control Tower Guardrails framework to help you prepare for audits. This framework includes a prebuilt collection of controls with descriptions and testing procedures.

AWS Control Tower is built on top of trusted and reliable AWS services including AWS Service Catalog, AWS IAM Identity Center, and AWS Organizations. For more information, see …

AWS Control Tower is a service that enables you to enforce and manage governance rules for security, operations, and compliance at scale across all your organizations and accounts in the …

Mandatory controls are owned by AWS Control Tower, and they apply to every OU on your landing zone, with some exceptions for the Security OU. These controls are applied to your …

The following sections include an individual reference entry for each of the controls available in AWS Control Tower. The controls are grouped into sections according to common …

Both AWS Control Tower and AWS Security Hub CSPM continually evaluate all of your AWS accounts and workloads and provide dashboards so you can quickly identify areas of deviation …

A control is a high-level rule that provides ongoing governance for your overall AWS environment. It's expressed in plain language. AWS Control Tower implements preventive, detective, and …

This pattern describes how to use AWS CloudFormation and AWS Cloud Development Kit (AWS CDK) to implement and administer preventive, detective, and proactive AWS Control Tower …

Dec 9, 2025 · This conformance pack contains AWS Config rules based on AWS Control Tower Detective Guardrails. For a list of all managed rules supported by AWS Config, see List of …

After launch, AWS Control Tower guardrails apply automatically to accounts in that OU. You can enroll additional existing AWS accounts into an OU that's governed by AWS Control Tower, so …