Amazon Web Services

AWS Control Tower

Definition

A service that automates setting up a multi-account landing zone on top of AWS Organizations: OU structure, baseline accounts (Log Archive, Audit), preventive and detective guardrails, and a self-service catalog of products for new accounts.

Exam context

In SAP-C02 it's compared to setting up Organizations manually: Control Tower speeds up governance setup by applying best practices out of the box. Typical question: quickly establish a multi-account landing zone with standard security guardrails → Control Tower.

Studying for the SAP-C02?

AWS Control Tower is a concept that can show up on the exam. Check the full guide to see it in context.