# Amazon Control Tower

**Canonical:** https://apis.io/providers/amazon-control-tower/  
**Website:** https://aws.amazon.com/controltower/  
**APIs profiled:** 4

AWS Control Tower provides the easiest way to set up and govern a secure, multi-account AWS environment based on best practices. It establishes a landing zone with pre-configured governance and guardrails, enabling organizations to maintain compliance and manage accounts at scale. With over 750 preconfigured controls, it automates account creation, OU registration, and compliance enforcement across the entire AWS organization.

## Kin Score — 43.8 / 100 (developing)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 43.8).

| Facet | Score |
|---|---|
| Discoverability | 74.1 |
| Contract Quality | 30.3 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 26.3 |
| Developer Ergonomics | 50.0 |
| Commercial Clarity | 61.8 |
| Access Clarity | 61.8 |

## Agent readiness — 41.9 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | verified |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Freemium · Self-serve signup — onboarding: self-serve, pricing: freemium, trial: no (confidence: high).

## APIs (4)

- **Amazon Control Tower Baselines API** — Operations for applying and managing baselines on organizational units
- **Amazon Control Tower Controls API** — Operations for enabling, disabling, and managing guardrail controls on organizational units
- **Amazon Control Tower Landing Zones API** — Operations for managing AWS Control Tower landing zones
- **Amazon Control Tower Tags API** — Operations for tagging AWS Control Tower resources

## Agentic access (1)

- **Amazon Control Tower Agentic Access** — 28 operations · 27 acting · 27 human-in-the-loop

## Security (4)

- **Amazon Control Tower Authentication** — http · 1 scheme
- **Amazon Control Tower Domain Security** — TLSv1.3 · HSTS · DMARC
- **Amazon Control Tower Vulnerability Disclosure** — security.txt · contact published
- **Amazon Control Tower Trust Center** — PCI DSS, HIPAA, FedRAMP, GDPR, FIPS 140

## Plans (1)

- **Amazon Control Tower Plans Pricing**

## Use cases (5)

- **Multi-Account Environment Setup** — Quickly set up a secure, well-architected multi-account AWS environment with landing zone configuration completed in under 30 minutes.
- **Compliance Automation** — Deploy preconfigured controls to enforce regulatory compliance standards such as PCI-DSS, HIPAA, NIST, and SOC 2 across all accounts.
- **Account Vending** — Automate provisioning of new AWS accounts with built-in security policies, IAM roles, and governance configurations using Account Factory.
- **OU Governance** — Programmatically register organizational units with Control Tower baselines and apply targeted controls for department-specific governance.
- **Risk and Posture Management** — Continuously monitor compliance posture across all accounts and receive alerts when controls are violated or drift is detected.

## Tags

Compliance, Governance, Landing Zone, Multi-Account, Security, Controls

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/amazon-control-tower/). Scores are computed from the provider's own public artifacts under a published rubric.