AWS Control Tower

Our Approach

We start by understanding your current company organization, taking into consideration the management structure for company products and services. Using the AWS Organizations service, the company IT organization can be mimiced (as necessary) to reflect business processes and management scope of responsibility. AWS Control Tower allows the organization to organize and deploy a base core functionality (logging and archive, audit). Additionally, AWS Control Tower can be used to reflect the company’s CI/CD processes and toolset. Each major development effort might be provisioned with development, staging, and production accounts.

Paragon Cloud Services provides assistance to clients ensuring the business processes , management scope of responsibility and AWS Organization service is configured according to best practices.

AWS Control Tower Features covered include:

• Landing zone – A landing zone is a well-architected, multi-account environment that's based on security and compliance best practices.
• Controls – A control (sometimes called a guardrail) is a high-level rule that provides ongoing governance for your overall AWS environment. It's expressed in plain language. Three kinds of controls exist: preventive, detective, and proactive.
• Account Factory – An Account Factory is a configurable account template that helps to standardize the provisioning of new accounts with pre-approved account configurations.
• Dashboard – The dashboard offers continuous oversight of your landing zone to your team of central cloud administrators. Use the dashboard to see provisioned accounts across your enterprise, controls enabled for policy enforcement, controls enabled for continuous detection of policy non-conformance, and noncompliant resources organized by accounts and OUs.