Amazon Control Tower website screenshot

Amazon Control Tower

AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment based on best practices. It establishes a landing zone with pre-configured governance and guardrails, enabling organizations to maintain compliance and manage accounts at scale. With over 750 preconfigured controls, it automates account creation, OU registration, and compliance enforcement across the entire AWS organization.

Amazon Control Tower publishes 4 APIs on the APIs.io network, including Baselines API, Controls API, Landing Zones API, and 1 more. Tagged areas include Compliance, Governance, Landing Zone, Multi-Account, and Security.

The Amazon Control Tower catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Amazon Control Tower’s developer surface includes authentication, developer portal, documentation, support, engineering blog, developer console, signup flow, and 22 more developer resources.

🌐 Visit website 📡 Source on GitHub
67.4/100 exemplar ▼ -7.8 Agent 44/100 agent ready Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
4 APIs 7 Features 5 Use Cases
ComplianceGovernanceLanding ZoneMulti-AccountSecurityControls

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 67.4/100 · exemplar
Contract Quality 17.4 / 25
Developer Ergonomics 9.1 / 20
Commercial Clarity 18.4 / 20
Operational Transparency 6.8 / 13
Governance 8.3 / 12
Discoverability 7.4 / 10
Agent readiness — 44/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/amazon-control-tower: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 4

Individual APIs this provider publishes, each with its own machine-readable definition.

Amazon Control Tower Baselines API

Operations for applying and managing baselines on organizational units

Amazon Control Tower Controls API

Operations for enabling, disabling, and managing guardrail controls on organizational units

Amazon Control Tower Landing Zones API

Operations for managing AWS Control Tower landing zones

Amazon Control Tower Tags API

Operations for tagging AWS Control Tower resources

Postman Collections 1

Ready-to-run Postman collections for exercising this provider's APIs.

AWS Control Tower API

POSTMAN

Open Collections 1

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

AWS Control Tower API

OPEN COLLECTION

Arazzo Workflows 7

Multi-step API workflows described with the Arazzo specification.

AWS Control Tower Create Landing Zone and Confirm

Create a landing zone, poll the async operation to completion, then read back the landing zone details.

ARAZZO

AWS Control Tower Disable Control and Confirm

Disable a control on an organizational unit and poll the async operation until it completes.

ARAZZO

AWS Control Tower Enable Baseline and Confirm

Apply a baseline to a target, poll the async operation to completion, then read back the enabled baseline.

ARAZZO

AWS Control Tower Enable Control and Confirm

Enable a control on an organizational unit, poll the async operation to completion, then read back the enabled control.

ARAZZO

AWS Control Tower Update Enabled Baseline and Confirm

Upgrade an enabled baseline to a new version, poll the async operation, then read back its details.

ARAZZO

AWS Control Tower Update Enabled Control and Confirm

Reconfigure an already enabled control, poll the async operation, then read back the updated control.

ARAZZO

AWS Control Tower Update Landing Zone and Confirm

Update a landing zone's version or manifest, poll the async operation, then read back its details.

ARAZZO

Scroll for all 7

Pricing Plans 1

Published pricing tiers and plan structures.

Amazon Control Tower Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Amazon Control Tower Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Amazon Control Tower Finops

FINOPS

Features 7

Notable capabilities this provider offers.

Landing Zone Management

Create, configure, update, reset, and delete AWS Control Tower landing zones programmatically via API, automating multi-account environment setup.

Controls (Guardrails) Library

Over 750 preconfigured controls (guardrails) covering security, operations, and compliance. Enable or disable controls on organizational units via API.

Baseline Registration

Apply and manage baselines on organizational units (OUs) to register them with AWS Control Tower and enforce standard configurations programmatically.

Multi-Account Governance

Automate creation of AWS accounts with built-in governance, policies, and security controls through integration with AWS Organizations.

Compliance Enforcement

Deploy preventive, detective, and proactive controls to enforce compliance standards including CIS, NIST, PCI-DSS, HIPAA, and SOC 2.

Audit and Logging

Centralized audit logging to Amazon S3 and AWS CloudTrail integration for full visibility into API calls and governance actions.

Third-Party Integrations

Seamlessly integrate third-party security, compliance, and ITSM tools at scale to enhance your AWS multi-account environment.

Scroll for all 7

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Amazon Control Tower Context

46 classes · 36 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Amazon Control Tower API Rules

5 rules · 3 warnings 2 info

SPECTRAL

Amazon Control Tower API Rules

32 rules · 13 errors 14 warnings 5 info

SPECTRAL

JSON Schema 43

Standalone JSON Schema definitions for this provider's data models.

BaselineOperation

6 properties

JSON SCHEMA

Baseline

3 properties

JSON SCHEMA

ControlOperation

9 properties

JSON SCHEMA

ControlOperationSummary

5 properties

JSON SCHEMA

CreateLandingZoneRequest

3 properties

JSON SCHEMA

CreateLandingZoneResponse

2 properties

JSON SCHEMA

DeleteLandingZoneResponse

1 properties

JSON SCHEMA

DisableBaselineResponse

1 properties

JSON SCHEMA

DisableControlResponse

1 properties

JSON SCHEMA

EnableBaselineRequest

5 properties

JSON SCHEMA

EnableBaselineResponse

2 properties

JSON SCHEMA

EnableControlRequest

4 properties

JSON SCHEMA

EnableControlResponse

2 properties

JSON SCHEMA

EnabledBaselineParameter

2 properties

JSON SCHEMA

EnabledBaseline

6 properties

JSON SCHEMA

EnabledBaselineSummary

4 properties

JSON SCHEMA

EnabledControlParameter

2 properties

JSON SCHEMA

EnabledControl

6 properties

JSON SCHEMA

EnabledControlSummary

4 properties

JSON SCHEMA

GetBaselineOperationResponse

1 properties

JSON SCHEMA

GetBaselineResponse

3 properties

JSON SCHEMA

GetControlOperationResponse

1 properties

JSON SCHEMA

GetEnabledBaselineResponse

1 properties

JSON SCHEMA

GetEnabledControlResponse

1 properties

JSON SCHEMA

GetLandingZoneOperationResponse

1 properties

JSON SCHEMA

GetLandingZoneResponse

1 properties

JSON SCHEMA

LandingZoneOperationDetail

6 properties

JSON SCHEMA

LandingZoneOperationSummary

4 properties

JSON SCHEMA

LandingZone

6 properties

JSON SCHEMA

LandingZoneSummary

1 properties

JSON SCHEMA

ListBaselinesResponse

2 properties

JSON SCHEMA

ListControlOperationsResponse

2 properties

JSON SCHEMA

ListEnabledBaselinesResponse

2 properties

JSON SCHEMA

ListEnabledControlsResponse

2 properties

JSON SCHEMA

ListLandingZoneOperationsResponse

2 properties

JSON SCHEMA

ListLandingZonesResponse

2 properties

JSON SCHEMA

ResetEnabledBaselineResponse

1 properties

JSON SCHEMA

ResetEnabledControlResponse

1 properties

JSON SCHEMA

ResetLandingZoneResponse

1 properties

JSON SCHEMA

UpdateEnabledBaselineResponse

1 properties

JSON SCHEMA

UpdateEnabledControlResponse

1 properties

JSON SCHEMA

UpdateLandingZoneRequest

3 properties

JSON SCHEMA

UpdateLandingZoneResponse

1 properties

JSON SCHEMA

Scroll for all 43

JSON Structure 43

JSON Structure definitions describing this provider's data shapes.

Baseline Operation Structure

6 properties

JSON STRUCTURE

Baseline Structure

3 properties

JSON STRUCTURE

Control Operation Structure

9 properties

JSON STRUCTURE

Control Operation Summary Structure

5 properties

JSON STRUCTURE

Create Landing Zone Request Structure

3 properties

JSON STRUCTURE

Create Landing Zone Response Structure

2 properties

JSON STRUCTURE

Delete Landing Zone Response Structure

1 properties

JSON STRUCTURE

Disable Baseline Response Structure

1 properties

JSON STRUCTURE

Disable Control Response Structure

1 properties

JSON STRUCTURE

Enable Baseline Request Structure

5 properties

JSON STRUCTURE

Enable Baseline Response Structure

2 properties

JSON STRUCTURE

Enable Control Request Structure

4 properties

JSON STRUCTURE

Enable Control Response Structure

2 properties

JSON STRUCTURE

Enabled Baseline Parameter Structure

2 properties

JSON STRUCTURE

Enabled Baseline Structure

6 properties

JSON STRUCTURE

Enabled Baseline Summary Structure

4 properties

JSON STRUCTURE

Enabled Control Parameter Structure

2 properties

JSON STRUCTURE

Enabled Control Structure

6 properties

JSON STRUCTURE

Enabled Control Summary Structure

4 properties

JSON STRUCTURE

Get Baseline Operation Response Structure

1 properties

JSON STRUCTURE

Get Baseline Response Structure

3 properties

JSON STRUCTURE

Get Control Operation Response Structure

1 properties

JSON STRUCTURE

Get Enabled Baseline Response Structure

1 properties

JSON STRUCTURE

Get Enabled Control Response Structure

1 properties

JSON STRUCTURE

Get Landing Zone Operation Response Structure

1 properties

JSON STRUCTURE

Get Landing Zone Response Structure

1 properties

JSON STRUCTURE

Landing Zone Operation Detail Structure

6 properties

JSON STRUCTURE

Landing Zone Operation Summary Structure

4 properties

JSON STRUCTURE

Landing Zone Structure

6 properties

JSON STRUCTURE

Landing Zone Summary Structure

1 properties

JSON STRUCTURE

List Baselines Response Structure

2 properties

JSON STRUCTURE

List Control Operations Response Structure

2 properties

JSON STRUCTURE

List Enabled Baselines Response Structure

2 properties

JSON STRUCTURE

List Enabled Controls Response Structure

2 properties

JSON STRUCTURE

List Landing Zone Operations Response Structure

2 properties

JSON STRUCTURE

List Landing Zones Response Structure

2 properties

JSON STRUCTURE

Reset Enabled Baseline Response Structure

1 properties

JSON STRUCTURE

Reset Enabled Control Response Structure

1 properties

JSON STRUCTURE

Reset Landing Zone Response Structure

1 properties

JSON STRUCTURE

Update Enabled Baseline Response Structure

1 properties

JSON STRUCTURE

Update Enabled Control Response Structure

1 properties

JSON STRUCTURE

Update Landing Zone Request Structure

3 properties

JSON STRUCTURE

Update Landing Zone Response Structure

1 properties

JSON STRUCTURE

Scroll for all 43

Examples 43

Example request and response payloads for these APIs.

Baseline Example

3 fields

EXAMPLE

Baseline Operation Example

6 fields

EXAMPLE

Control Operation Example

9 fields

EXAMPLE

Control Operation Summary Example

5 fields

EXAMPLE

Create Landing Zone Request Example

3 fields

EXAMPLE

Create Landing Zone Response Example

2 fields

EXAMPLE

Delete Landing Zone Response Example

1 fields

EXAMPLE

Disable Baseline Response Example

1 fields

EXAMPLE

Disable Control Response Example

1 fields

EXAMPLE

Enable Baseline Request Example

5 fields

EXAMPLE

Enable Baseline Response Example

2 fields

EXAMPLE

Enable Control Request Example

4 fields

EXAMPLE

Enable Control Response Example

2 fields

EXAMPLE

Enabled Baseline Example

6 fields

EXAMPLE

Enabled Baseline Parameter Example

2 fields

EXAMPLE

Enabled Baseline Summary Example

4 fields

EXAMPLE

Enabled Control Example

6 fields

EXAMPLE

Enabled Control Parameter Example

2 fields

EXAMPLE

Enabled Control Summary Example

4 fields

EXAMPLE

Get Baseline Operation Response Example

1 fields

EXAMPLE

Get Baseline Response Example

3 fields

EXAMPLE

Get Control Operation Response Example

1 fields

EXAMPLE

Get Enabled Baseline Response Example

1 fields

EXAMPLE

Get Enabled Control Response Example

1 fields

EXAMPLE

Get Landing Zone Operation Response Example

1 fields

EXAMPLE

Get Landing Zone Response Example

1 fields

EXAMPLE

Landing Zone Example

6 fields

EXAMPLE

Landing Zone Operation Detail Example

6 fields

EXAMPLE

Landing Zone Operation Summary Example

4 fields

EXAMPLE

Landing Zone Summary Example

1 fields

EXAMPLE

List Baselines Response Example

2 fields

EXAMPLE

List Control Operations Response Example

2 fields

EXAMPLE

List Enabled Baselines Response Example

2 fields

EXAMPLE

List Enabled Controls Response Example

2 fields

EXAMPLE

List Landing Zone Operations Response Example

2 fields

EXAMPLE

List Landing Zones Response Example

2 fields

EXAMPLE

Reset Enabled Baseline Response Example

1 fields

EXAMPLE

Reset Enabled Control Response Example

1 fields

EXAMPLE

Reset Landing Zone Response Example

1 fields

EXAMPLE

Update Enabled Baseline Response Example

1 fields

EXAMPLE

Update Enabled Control Response Example

1 fields

EXAMPLE

Update Landing Zone Request Example

3 fields

EXAMPLE

Update Landing Zone Response Example

1 fields

EXAMPLE

Scroll for all 43

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Amazon Control Tower Authentication

http · 1 scheme

SECURITY

Amazon Control Tower Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Amazon Control Tower Vulnerability Disclosure

security.txt · contact published

SECURITY

Amazon Control Tower Trust Center

PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Amazon Control Tower Agentic Access

28 operations · 27 acting · 27 human-in-the-loop

28 operations · 27 acting

AGENTIC

Use Cases 5

What developers build with this provider.

Multi-Account Environment Setup

Quickly set up a secure, well-architected multi-account AWS environment with landing zone configuration completed in under 30 minutes.

Compliance Automation

Deploy preconfigured controls to enforce regulatory compliance standards such as PCI-DSS, HIPAA, NIST, and SOC 2 across all accounts.

Account Vending

Automate provisioning of new AWS accounts with built-in security policies, IAM roles, and governance configurations using Account Factory.

OU Governance

Programmatically register organizational units with Control Tower baselines and apply targeted controls for department-specific governance.

Risk and Posture Management

Continuously monitor compliance posture across all accounts and receive alerts when controls are violated or drift is detected.

Resources

Get Started 5

Portal, sign-up, and the first successful call

Portal
Portal
 DeveloperPortal
DeveloperPortal
 Console
Console
 Signup
Signup
 Login
Login

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess

Design & Contract 9

Pagination, idempotency, versioning, errors, and events

Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 SpectralRules
SpectralRules
 Vocabulary
Vocabulary

Scroll for all 9

Build 2

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace
PostmanWorkspace
 GitHubOrganization
GitHubOrganization

Access & Security 4

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 3

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 Contact
Contact

Commercial 3

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy
 Pricing
Pricing

Company 1

The organization behind the API

Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: amazon-control-tower
name: Amazon Control Tower
description: AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment based
  on best practices. It establishes a landing zone with pre-configured governance and guardrails, enabling organizations to
  maintain compliance and manage accounts at scale. With over 750 preconfigured controls, it automates account creation, OU
  registration, and compliance enforcement across the entire AWS organization.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/amazon-control-tower.png
tags:
- AWS
- Compliance
- Governance
- Landing Zone
- Multi-Account
- Security
- Controls
url: https://raw.githubusercontent.com/api-evangelist/amazon-control-tower/refs/heads/main/apis.yml
created: '2026-03-16'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: amazon-control-tower:amazon-control-tower-baselines-api
  name: Amazon Control Tower Baselines API
  description: Operations for applying and managing baselines on organizational units
  humanURL: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  baseURL: https://controltower.amazonaws.com
  tags:
  - Baselines
  properties:
  - type: OpenAPI
    url: openapi/amazon-control-tower-baselines-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://aws.amazon.com/controltower/getting-started/
  - type: Pricing
    url: https://aws.amazon.com/controltower/pricing/
  - type: FAQ
    url: https://aws.amazon.com/controltower/faqs/
  - type: APIReference
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/API_Operations.html
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html
  - type: JSONSchema
    url: json-schema/landing-zone-schema.json
  - type: JSONSchema
    url: json-schema/enabled-control-schema.json
  - type: JSONSchema
    url: json-schema/enabled-baseline-schema.json
  - type: JSONLD
    url: json-ld/amazon-control-tower-context.jsonld
- aid: amazon-control-tower:amazon-control-tower-controls-api
  name: Amazon Control Tower Controls API
  description: Operations for enabling, disabling, and managing guardrail controls on organizational units
  humanURL: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  baseURL: https://controltower.amazonaws.com
  tags:
  - Controls
  properties:
  - type: OpenAPI
    url: openapi/amazon-control-tower-controls-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://aws.amazon.com/controltower/getting-started/
  - type: Pricing
    url: https://aws.amazon.com/controltower/pricing/
  - type: FAQ
    url: https://aws.amazon.com/controltower/faqs/
  - type: APIReference
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/API_Operations.html
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html
  - type: JSONSchema
    url: json-schema/landing-zone-schema.json
  - type: JSONSchema
    url: json-schema/enabled-control-schema.json
  - type: JSONSchema
    url: json-schema/enabled-baseline-schema.json
  - type: JSONLD
    url: json-ld/amazon-control-tower-context.jsonld
- aid: amazon-control-tower:amazon-control-tower-landing-zones-api
  name: Amazon Control Tower Landing Zones API
  description: Operations for managing AWS Control Tower landing zones
  humanURL: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  baseURL: https://controltower.amazonaws.com
  tags:
  - Landing Zones
  properties:
  - type: OpenAPI
    url: openapi/amazon-control-tower-landing-zones-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://aws.amazon.com/controltower/getting-started/
  - type: Pricing
    url: https://aws.amazon.com/controltower/pricing/
  - type: FAQ
    url: https://aws.amazon.com/controltower/faqs/
  - type: APIReference
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/API_Operations.html
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html
  - type: JSONSchema
    url: json-schema/landing-zone-schema.json
  - type: JSONSchema
    url: json-schema/enabled-control-schema.json
  - type: JSONSchema
    url: json-schema/enabled-baseline-schema.json
  - type: JSONLD
    url: json-ld/amazon-control-tower-context.jsonld
- aid: amazon-control-tower:amazon-control-tower-tags-api
  name: Amazon Control Tower Tags API
  description: Operations for tagging AWS Control Tower resources
  humanURL: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  baseURL: https://controltower.amazonaws.com
  tags:
  - Tags
  properties:
  - type: OpenAPI
    url: openapi/amazon-control-tower-tags-api-openapi.yml
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/Welcome.html
  - type: GettingStarted
    url: https://aws.amazon.com/controltower/getting-started/
  - type: Pricing
    url: https://aws.amazon.com/controltower/pricing/
  - type: FAQ
    url: https://aws.amazon.com/controltower/faqs/
  - type: APIReference
    url: https://docs.aws.amazon.com/controltower/latest/APIReference/API_Operations.html
  - type: Documentation
    url: https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html
  - type: JSONSchema
    url: json-schema/landing-zone-schema.json
  - type: JSONSchema
    url: json-schema/enabled-control-schema.json
  - type: JSONSchema
    url: json-schema/enabled-baseline-schema.json
  - type: JSONLD
    url: json-ld/amazon-control-tower-context.jsonld
common:
- type: AgenticAccess
  url: agentic-access/amazon-control-tower-agentic-access.yml
- type: TrustCenter
  url: security/amazon-control-tower-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/amazon-control-tower-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/amazon-control-tower-domain-security.yml
- type: Authentication
  url: authentication/amazon-control-tower-authentication.yml
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/amazon-control-tower/overview
- type: Arazzo
  url: arazzo/amazon-control-tower-create-landing-zone-workflow.yml
  name: AWS Control Tower Create Landing Zone and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-disable-control-workflow.yml
  name: AWS Control Tower Disable Control and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-enable-baseline-workflow.yml
  name: AWS Control Tower Enable Baseline and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-enable-control-workflow.yml
  name: AWS Control Tower Enable Control and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-update-enabled-baseline-workflow.yml
  name: AWS Control Tower Update Enabled Baseline and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-update-enabled-control-workflow.yml
  name: AWS Control Tower Update Enabled Control and Confirm
- type: Arazzo
  url: arazzo/amazon-control-tower-update-landing-zone-workflow.yml
  name: AWS Control Tower Update Landing Zone and Confirm
- type: Portal
  url: https://aws.amazon.com/controltower/
- type: DeveloperPortal
  url: https://aws.amazon.com/controltower/
- type: Documentation
  url: https://docs.aws.amazon.com/controltower/
- type: TermsOfService
  url: https://aws.amazon.com/service-terms/
- type: PrivacyPolicy
  url: https://aws.amazon.com/privacy/
- type: Support
  url: https://aws.amazon.com/premiumsupport/
- type: Blog
  url: https://aws.amazon.com/blogs/mt/category/management-tools/aws-control-tower/
- type: GitHubOrganization
  url: https://github.com/aws
- type: Console
  url: https://console.aws.amazon.com/controltower/
- type: Signup
  url: https://portal.aws.amazon.com/billing/signup
- type: Login
  url: https://signin.aws.amazon.com/
- type: StatusPage
  url: https://health.aws.amazon.com/health/status
- type: Contact
  url: https://aws.amazon.com/contact-us/
- type: Pricing
  url: https://aws.amazon.com/controltower/pricing/
- type: SpectralRules
  url: rules/amazon-control-tower-spectral-rules.yml
- type: Vocabulary
  url: vocabulary/amazon-control-tower-vocabulary.yaml
- type: Features
  data:
  - name: Landing Zone Management
    description: Create, configure, update, reset, and delete AWS Control Tower landing zones programmatically via API, automating
      multi-account environment setup.
  - name: Controls (Guardrails) Library
    description: Over 750 preconfigured controls (guardrails) covering security, operations, and compliance. Enable or disable
      controls on organizational units via API.
  - name: Baseline Registration
    description: Apply and manage baselines on organizational units (OUs) to register them with AWS Control Tower and enforce
      standard configurations programmatically.
  - name: Multi-Account Governance
    description: Automate creation of AWS accounts with built-in governance, policies, and security controls through integration
      with AWS Organizations.
  - name: Compliance Enforcement
    description: Deploy preventive, detective, and proactive controls to enforce compliance standards including CIS, NIST,
      PCI-DSS, HIPAA, and SOC 2.
  - name: Audit and Logging
    description: Centralized audit logging to Amazon S3 and AWS CloudTrail integration for full visibility into API calls
      and governance actions.
  - name: Third-Party Integrations
    description: Seamlessly integrate third-party security, compliance, and ITSM tools at scale to enhance your AWS multi-account
      environment.
- type: UseCases
  data:
  - name: Multi-Account Environment Setup
    description: Quickly set up a secure, well-architected multi-account AWS environment with landing zone configuration completed
      in under 30 minutes.
  - name: Compliance Automation
    description: Deploy preconfigured controls to enforce regulatory compliance standards such as PCI-DSS, HIPAA, NIST, and
      SOC 2 across all accounts.
  - name: Account Vending
    description: Automate provisioning of new AWS accounts with built-in security policies, IAM roles, and governance configurations
      using Account Factory.
  - name: OU Governance
    description: Programmatically register organizational units with Control Tower baselines and apply targeted controls for
      department-specific governance.
  - name: Risk and Posture Management
    description: Continuously monitor compliance posture across all accounts and receive alerts when controls are violated
      or drift is detected.
- type: Integrations
  data:
  - name: AWS Organizations
    description: Native integration with AWS Organizations for multi-account structure, OU management, and account creation
      within a Control Tower landing zone.
  - name: AWS Service Catalog
    description: Account Factory integration through AWS Service Catalog for self-service account provisioning with pre-approved
      configurations.
  - name: AWS CloudTrail
    description: All Control Tower API calls are logged to AWS CloudTrail for audit trails, security investigations, and compliance
      reporting.
  - name: AWS Config
    description: Detective controls are implemented using AWS Config rules to continuously evaluate resource compliance within
      managed accounts.
  - name: AWS Security Hub
    description: Integrate Control Tower findings with AWS Security Hub for centralized security posture management and cross-account
      visibility.
  - name: AWS CloudFormation
    description: Launch landing zones and enable controls using CloudFormation templates and resource providers for infrastructure-as-code
      governance.
  - name: Terraform
    description: Community-supported Terraform providers for managing Control Tower landing zones, controls, and account factory
      configurations.
- type: Integrations
  url: https://aws.amazon.com/marketplace
integrations:
- name: Sign in
- name: Agent Mode
- name: Why AWS Marketplace?
- name: Get started in AWS Marketplace
- name: Industry
- name: Resources
- name: Become a Channel Partner
- name: Sell in AWS Marketplace
- name: Manage Your Account
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com