AWS Accounts form the foundations of your operating environments. An AWS Account serves as a container for your AWS resources including configuration of services, security & compliance controls, cost controls, and scaling. As a best practice, each and every application or project should deploy into its own AWS Account. The need to deliver hundreds or even thousands of distinct applications, each with their own AWS Account, brings new challenges for enterprises.

How do you ensure provisioning of AWS Accounts scales and doesn’t become a bottleneck to deployment? How do you ensure consistency in guardrails and security controls? How can you deploy AWS Accounts with standardized sets of resources for networking and observability? How do you achieve both autonomy and governance?

The Mphasis Stelligent Enterprise Account Factory delivers the capability for DevOps teams to develop and provision validated and standardized AWS Accounts. These AWS Accounts are provisioned with enterprise standard resources for networking, security, and observation. DevOps teams gain the capability to define, build, validate, and publish standardized AWS Account products that enforce quality, security, and governance. Product and development teams are empowered to deploy validated AWS Accounts on-demand, without involving operations teams, and with confidence that they meet enterprise operational standards.

Enterprise Account Factory builds on the AWS Control Tower offering which provides an easy way to set up and govern a secure, multi-account AWS environment (Landing Zone). Customizations for AWS Control Tower allows for deployment of custom resources and Service Control Policies. Enterprise Account Factory extends this capability further by adding the capability to define complex sets of Account controls and guardrails and to enforce them through the deployment pipeline.