Category: Security, Identity, & Compliance

AWS Control Tower provides a ready-to-use native integration with AWS Single Sign-On (AWS SSO) to manage users, roles, and multi-account access. Some customers’ organizations have more complex SSO requirements, including integrating with external identity providers to handle authentication and authorization. Okta is an enterprise-grade identity management service that is built for the cloud, but is […]

Along with adopting and managing a multi-account structure, customers must also manage user authentication and authorization. Customers who use a multi-account structure governed by AWS Control Tower require a centralized system to manage user authentication and authorization. AWS Control Tower enables customers to manage and govern a multi-account structure. After you have launched AWS Control […]

This blog post was written by Kanishk Mahajan, ISV Solutions Architecture Lead at AWS and guest author Maya Neelakandhan, Head of Customer Success at CloudKnox. Introduction Permissions management in AWS empowers security and cloud infrastructure teams to protect your cloud resources from misuse of identity permissions. Cloud security requires continuous enforcement of least-privilege policies across […]

During re:Invent 2020, AWS launched AWS Private Marketplace APIs to enable customers to programmatically manage their Private Marketplace. Private Marketplace, a feature of AWS Marketplace, enables administrators to create list of approved software products for their users to purchase from AWS Marketplace’s catalog. To provide administrators greater control to create distinct list of approved products […]

In this blog post, I show you how to configure cloudtamer.io for your AWS Control Tower managed environment. Using this solution you can seamlessly register accounts from both cloudtamer.io and AWS.

AWS Marketplace buyers can now manage entitlements for product licenses procured in AWS Marketplace within AWS License Manager. Managed entitlements for AWS Marketplace help buyers automatically create licenses corresponding to product subscriptions across its catalog of more than 8,000 offerings. This gives buyers account-level visibility to their licenses procured in AWS Marketplace and gives buyers […]

AWS Marketplace now enables buyers to programmatically manage their Private Marketplace using a set of publicly accessible APIs. With Private Marketplace, buyers can curate a catalog of approved third-party software available in AWS Marketplace. This enables their organization’s end users to purchase software governed by their internal policies and procedures from AWS Marketplace. Private Marketplace […]

Operational intelligence in a cloud environment helps organizations gain in-depth visibility into resources across multiple accounts and regions. Operational intelligence software solutions can help AWS Control Tower administrators automate tool integration, enabling complete visibility and insights in real time. Having a multi-account strategy is a best practice to achieve higher isolation of resources. It also […]

AWS Control Tower enables you to create new AWS accounts in your AWS Organization with AWS-recommended best practices and guardrails in place. Our customers and partners often ask for ways to automate the execution of some customizations specific to their organization on the creation of a new AWS account. This is especially true for customers […]

Automating FortiGate Next Generation Firewall Intrusion Prevention using AWS CloudFormation AWS CloudFormation provides a way for you to create templates that can help you automatically launch resources. This helps you eliminate manual tasks such as configuring route tables or assigning elastic IP addresses (EIP) to instances. In this blog post, I show how to help […]