Overview

This solution offering utilizes AWS Control Tower lifecycle events to trigger downstream automation processes on AWS accounts managed by AWS Organizations and/or Control Tower Organizational Units (OUs). Processing events include enabling AWS-native security features/capabilities for desired regions, establishing organizational policies (e.g. service control, backup, tagging) for OUs, and optionally enabling 3rd party service integrations.

Components of the full secure cloud-based solution offering offered by MZC on AWS Marketplace:

• Creation and implementation of Standardized DevOps pipelines for the purposes of deploying
• Multi-Region Master/Member initialization of AWS-Native Security Services (i.e. GuardDuty, Macie, Detective, Security Hub)
• Assignments of Service Control Policies according to least privilege
• Assignments of Backup policies to enforce standardized backup and archival flows for key storage resources
• Assignments of tag policies to audit tag usage through the Control Tower environment to detect drift from organizational compliance