There is no additional charge to use AWS Control Tower. You only pay for AWS services set up by AWS Control Tower, including services set up by default (such as AWS Service Catalog) and those used to implement your custom selections (such as AWS Config rules for enabled detective guardrails). You only pay for what you use, as you use it; there are no upfront commitments.

When you set up Control Tower, you will begin to incur costs for AWS services configured to set up your landing zone and mandatory guardrails. While some AWS services like AWS Organizations and AWS Single Sign-On (SSO) come at no additional charge, you will pay for services such as AWS Service Catalog, AWS CloudTrail, and AWS Config. You will also incur costs for AWS services configured when you implement strongly recommended guardrails. While there's no additional charge for AWS Organizations service control policies (SCPs) or AWS CloudFormation, you will pay for AWS Config rules when you enable optional detective guardrails.

Pricing example 1

You set up AWS Control Tower and govern with mandatory guardrails.

When you first set up AWS Control Tower from your master account, the landing zone provisions an account factory, creates 2 shared accounts, and applies mandatory guardrails (16 preventive guardrails and 2 detective guardrails). 

You will be charged the following:

  • $5 per month for a single account factory portfolio in AWS Service Catalog;
  • $0 per month for the Service Control Policies (SCPs) implemented for the mandatory preventive guardrails;
  • $32 per month for AWS Config rules in total. One AWS Config rule is required to implement each detective guardrail. You are charged $2 per month per account per AWS Region for each Config rule. Therefore, when Control Tower enforces 2 mandatory detective guardrails across 4 Regions on the 2 shared accounts, you will be charged $32 per month (= $2 * 4 Regions * 2 accounts * 2 Config rules).

Your master payer account is billed $37 per month.

You will also incur usage charges for resources such as AWS Config, AWS CloudTrail, Amazon CloudWatch, and Amazon S3, depending on your activity in your shared accounts (master, log archive, and audit accounts). Please refer to the pricing pages for individual AWS services for details.

Pricing example 2

After setting up your landing zone in Pricing Example #1, you now enable 2 strongly recommended preventive guardrails. You also provision 10 new accounts for use by your teams.

You will be charged the following:

  • $37 per month, from Pricing Example #1;
  • $0 per month for the SCPs implemented for the strongly recommended preventive guardrails

Your master payer account is billed $37 per month.

You will also incur usage charges for resources such as AWS Config, AWS CloudTrail, Amazon CloudWatch, and Amazon S3, depending on your activity in all your accounts (i.e., 3 shared and 10 provisioned accounts). Please refer to the pricing pages for individual AWS services for details.

Pricing example 3

In addition to Pricing Example #2, you enable 5 strongly recommended detective guardrails across 4 AWS Regions on the 10 new accounts.

You will be charged the following:

  • $37 per month, from Pricing Example #2;
  • $400 per month for AWS Config rules in total. One AWS Config rule is required to implement each detective guardrail. You will be charged $2 per month per AWS Region per Config rule. Therefore, if you enable 5 strongly recommended detective guardrails across 4 Regions on your 10 accounts, then you will be charged $400 per month (= $2 * 4 Regions * 10 accounts * 5 Config rules).

Your master account is billed $437 per month.

You will also incur usage charges for resources such as AWS Config, AWS CloudTrail, Amazon CloudWatch, and Amazon S3, depending on your activity in all your accounts (i.e., 3 shared and 10 provisioned accounts). Please refer to the pricing pages for individual AWS services for details.

Additional pricing resources

TCO Calculator

Calculate your total cost of ownership (TCO)

Simple Monthly Calculator

Easily calculate your monthly costs with AWS

Economics Resource Center

Additional resources for switching to AWS

Next-Steps-Icon_Product-page
Get an overview of AWS Control Tower
See overview 
Next-Steps-Icon_Tutorial
Discover AWS Control Tower features
Learn more 
Next-Steps-Icon_Blog
Read the blog post

Learn how AWS Control Tower enables enterprises to move even faster.

Read more