AWS Control Tower
A service that sets up and governs a secure, multi-account AWS environment with best practices.
AWS Control Tower is a managed service that automates setting up a secure, well-architected, multi-account environment called a landing zone. It provisions foundational accounts, configures AWS Organizations, and enables AWS CloudTrail and AWS Config across accounts, then applies pre-built controls (formerly called guardrails) to enforce governance. Controls are preventive (Service Control Policies that block actions) or detective (Config rules that flag non-compliance). For the exam: Control Tower sits on top of Organizations, adding automated provisioning and compliance — so when a question describes centrally governing many accounts with a standard landing zone, Control Tower is the answer.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →