Category: AWS Control Tower

AWS recommends that customers adopt a multi-account strategy as a best practice to achieve higher isolation of resources and help meet security, regulatory, and compliance needs. Customers must address questions around tracking their operational cost, identify security improvements, and ensure reliability and performance efficiency. Full-stack observability offers the troubleshooting tools needed, regardless of where problems […]

AWS Control Tower provides a ready-to-use native integration with AWS Single Sign-On (AWS SSO) to manage users, roles, and multi-account access. Some customers’ organizations have more complex SSO requirements, including integrating with external identity providers to handle authentication and authorization. Okta is an enterprise-grade identity management service that is built for the cloud, but is […]

Along with adopting and managing a multi-account structure, customers must also manage user authentication and authorization. Customers who use a multi-account structure governed by AWS Control Tower require a centralized system to manage user authentication and authorization. AWS Control Tower enables customers to manage and govern a multi-account structure. After you have launched AWS Control […]

This blog post was written by Kanishk Mahajan, ISV Solutions Architecture Lead at AWS and guest author Maya Neelakandhan, Head of Customer Success at CloudKnox. Introduction Permissions management in AWS empowers security and cloud infrastructure teams to protect your cloud resources from misuse of identity permissions. Cloud security requires continuous enforcement of least-privilege policies across […]

In this blog post, I show you how to configure CloudCheckr CMx for your AWS Control Tower managed environment. Using this solution you can manage and optimize multiple AWS accounts using a Multi Account View in CloudCheckr CMx.

In this blog post, I show you how to configure cloudtamer.io for your AWS Control Tower managed environment. Using this solution you can seamlessly register accounts from both cloudtamer.io and AWS.

As customers start their journey to the cloud, they’re faced with challenges. These can include knowledge about services, in-house technical capabilities, and the effort required to build an operational framework where they can manage their AWS environment. Having a centralized location to gain visibility into the applications running on multiple AWS accounts across Regions is […]

Here are AWS Marketplace sessions you can register for and view at re:Invent this week! Each session is held three times, in Pacific Standard Time (PST), Singapore Standard Time (SST), and London Greenwich Mean Time (GMT) time zones. Be sure to check the linked catalog listing, as dates and times may change. MKT303: Balance agility […]

Operational intelligence in a cloud environment helps organizations gain in-depth visibility into resources across multiple accounts and regions. Operational intelligence software solutions can help AWS Control Tower administrators automate tool integration, enabling complete visibility and insights in real time. Having a multi-account strategy is a best practice to achieve higher isolation of resources. It also […]

AWS Control Tower enables you to create new AWS accounts in your AWS Organization with AWS-recommended best practices and guardrails in place. Our customers and partners often ask for ways to automate the execution of some customizations specific to their organization on the creation of a new AWS account. This is especially true for customers […]