Posted On: Jan 28, 2021

AWS Control Tower now includes the ability for you to update up to 300 accounts in a registered AWS organizational unit (OU) with a single click from the AWS Control Tower console. This is particularly useful in cases where you update your AWS Control Tower landing zone and must also update your enrolled accounts to align them to the current landing zone version.

With this feature, you now have a simple one-click process to ensure that all accounts are up to date when you update your AWS Control Tower landing zone to expand to new regions, or when you want to re-register an OU to ensure that all accounts in that OU have the latest guardrails applied. It eliminates the need to update one account at a time or utilize an external script to perform the update on multiple accounts. AWS Control Tower is designed for organizations with multiple accounts and teams who are looking for the easiest way to set up their new or existing multi-account AWS environment and govern at scale. With an organization governed by AWS Control Tower, cloud administrators know that accounts in the organization are compliant with established policies.

For a full list of regions where AWS Control Tower is available, see the AWS Region Table. To learn more, visit the AWS Control Tower homepage or see the AWS Control Tower User Guide.

You can also visit the AWS Control Tower product webpage or visit YouTube to watch this video about getting started with AWS Control Tower for AWS Organizations.