With AWS Control Tower, you pay only for AWS services enabled by Control Tower which include the set-up of your AWS Landing Zone, mandatory guardrails, or customized options.
You will incur costs for AWS services configured in the set-up of your landing zone, mandatory guardrails and strongly recommended guardrails. No costs are incurred for strongly recommended guardrails that are preventative. The cost of each service will vary based on the number of regions, accounts, hours used, and guardrails enabled. These services are listed below with links to the corresponding pricing pages:
AWS service pricing for strongly recommended guardrails:
AWS Config rules
Learn how AWS Control Tower enables enterprises to move even faster.