AWS Control Tower enables automated setup of an AWS Landing Zone with predefined guardrails and integration with AWS IAM Identity Center (formerly AWS SSO), as well as a fully automated account factory. This allows users to have a sophisticated governance and a multi-account environment following AWS best practices. T-Systems is an accredited Service Delivery Partner for AWS Control Tower in the aspect of security. We have a proven track record of helping customers set up a secure AWS Landing Zone with AWS Control Tower. Our customers benefit from services we enable in addition to the AWS Control Tower Landing Zone.

• We enable the AWS Control Tower landing zone for multi-account setups using AWS Organizations
• We enable the integration of the AWS Control Tower Account Factory into your own cloud management system via APIs.
• We enable customization of service control policies and additional automations via CI/CD
• We extend your AWS Control Tower environment with security best practices according to the SRA (Security Reference Architecture)
• We extend preventive and detective guardrails according to your requirements and AWS best practices
• We help set up a sensible network architecture to fuse your on-premise world with the AWS cloud platform
• We support you in setting up an AD federation for a central user administration by applying single sign-on