Custom-tailored AWS Control Tower Landing Zone Enablement

AWS Control Tower enables automated setup of an AWS Landing Zone with predefined guardrails and integration with AWS IAM Identity Center (formerly AWS SSO), as well as a fully automated account factory. This allows users to have a sophisticated governance and a multi-account environment following AWS best practices. T-Systems is an accredited Service Delivery Partner for AWS Control Tower in the aspect of security. We have a proven track record of helping customers set up a secure AWS Landing Zone with AWS Control Tower. Our customers benefit from services we enable in addition to the AWS Control Tower Landing Zone.

As a trusted System Integrator, we specialize in implementing cloud solutions that ensure data sovereignty by aligning with regional compliance requirements, integrating robust data governance frameworks tailored to your needs.

• We enable the AWS Control Tower landing zone for multi-account setups using AWS Organizations
• We enable the integration of the AWS Control Tower Account Factory into your own cloud management system via APIs.
• We enable customization of service control policies and additional automations via CI/CD
• We extend your AWS Control Tower environment with security best practices according to the SRA (Security Reference Architecture)
• We extend preventive and detective guardrails according to your requirements and AWS best practices
• We help set up a sensible network architecture to fuse your on-premise world with the AWS cloud platform
• We support you in setting up an AD federation for a central user administration by applying single sign-on