{"id":38021,"date":"2022-04-30T23:35:00","date_gmt":"2022-04-30T18:05:00","guid":{"rendered":"https:\/\/blazeclan.com\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/"},"modified":"2024-03-19T11:13:00","modified_gmt":"2024-03-19T05:43:00","slug":"manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform","status":"publish","type":"post","link":"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/","title":{"rendered":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform"},"content":{"rendered":"\n<p>An AWS Landing Zone provides the perfect platform for customers to set up a secure, multi-account AWS environment based on AWS best practices. This is done by implementing the initial security baseline, core AWS accounts, and resources.<\/p>\n\n\n\n<p>The AWS Control Tower has become the de facto standard for quick and easy deployment of the Landing Zone on AWS. A Control Tower deployment offers a baseline architecture, which can further be customized and built using&nbsp;<a href=\"https:\/\/docs.aws.amazon.com\/solutions\/latest\/customizations-for-aws-control-tower\/welcome.html\" class=\"broken_link\">Customizations for AWS Control Tower<\/a>. This customization uses AWS CloudFormation under the hood and is hence suitable for customers who are well versed with AWS CloudFormation to manage the infrastructure-as-Code.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">AWS Control Tower Account Factory for Terraform<\/h2>\n\n\n\n<p>The AWS Control Tower team has recently released a Terraform Module called the AWS Control Tower Account Factory for Terraform (AFT) for those who want to leverage HashiCorp\u2019s Terraform to work alongside the AWS Control Tower.<\/p>\n\n\n\n<p>The AFT Module supplements an existing Control Tower deployment and helps to provide and manage a landing zone environment using configuration repositories and deployment pipelines. The module is maintained by the AWS Control Tower team.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">AFT Components and Work Flow<\/h3>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"606\" src=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X-1024x606.png\" alt=\"\" class=\"wp-image-24177\" srcset=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X-1024x606.png 1024w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X-300x178.png 300w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X-768x455.png 768w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X-130x78.png 130w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-1X.png 1196w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>AFT uses deployment pipelines to provision, customize, and manage a landing zone. These pipelines are triggered by changes made to a number of source code repositories. AFT supports GitHub, GitHub Enterprise, AWS CodeCommit, and Bitbucket as the choice for storing your source code.<\/p>\n\n\n\n<p>These deployment pipelines and other relevant resources are provisioned by deploying the AFT module within an existing AWS Control Tower environment. Most of the resources for AFT are provisioned within a dedicated AWS account (referred to as the AFT Management Account) as shown in the above diagram. The AFT module works with Terraform Open Source (OSS), Terraform Cloud, and Terraform Enterprise.<\/p>\n\n\n\n<p>AFT pipelines use configuration defined across 4 different source code repositories \u2013<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Repository Name (Default)<\/strong><\/td><td><strong>Repository Purpose<\/strong><\/td><\/tr><tr><td>aft-account-request<\/td><td>New account provisioning request using AFT<\/td><\/tr><tr><td>aft-global-customizations<\/td><td>Specify customizations to apply to all accounts created by AFT<\/td><\/tr><tr><td>aft-account-customizations<\/td><td>Specify account-related customizations<\/td><\/tr><tr><td>aft-account-provisioning-customizations<\/td><td>Specify provisioning-time customizations to apply to accounts<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p><em>Note<\/em><em>&nbsp;\u2013 The repository names given above can be customized as needed.<\/em><\/p>\n\n\n\n<p><strong>Workflow<\/strong>&nbsp;\u2013 Developers push changes to the respective repositories as needed, which triggers the following AFT workflow to provision and customize the account(s) \u2013<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>An AWS CodePipeline pipeline downloads the source code (Terraform files), and runs them within CodeBuild, which inserts an item in a DynamoDB table. The insertion of the item triggers a Lambda function which puts the request into an SQS-FIFO queue. The use of an SQS-FIFO queue within the workflow enables placing multiple requests simultaneously.<\/li>\n\n\n\n<li>Another Lambda function then reads the message placed on the queue and invokes the AWS Control Tower account vending machine within the Control Tower Management account. Once an account is provisioned by Control Tower, the workflow moves back to the AFT Management account for further processing.<\/li>\n\n\n\n<li>Lambda functions within the AFT management account trigger an account-specific customization pipeline for further customizations to the vendor account(s).<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">AFT Deployment<\/h3>\n\n\n\n<h4 class=\"wp-block-heading\">Pre-requisites<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Existing Control Tower deployment<\/li>\n\n\n\n<li>Dedicated OU for AFT (recommended, not mandatory)<\/li>\n\n\n\n<li>Dedicated AWS account for AFT module resources<\/li>\n\n\n\n<li>Terraform environment configured with\n<ul class=\"wp-block-list\">\n<li>terraform version &gt;= 0.15<\/li>\n\n\n\n<li>Administrator credentials of Control Tower Management Account.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"640\" src=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-2X-1024x640.png\" alt=\"\" class=\"wp-image-24189\" srcset=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-2X-1024x640.png 1024w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-2X-300x188.png 300w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-2X-768x480.png 768w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-2X.png 1084w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Deployment Steps<\/h4>\n\n\n\n<p>Once the above pre-requisites are met and you have access to a suitable terraform environment, create a main.tf file that uses the&nbsp;<a href=\"https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory\">AFT Module<\/a>. Below is a sample main.tf file with some of the module parameters \u2013<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>***************************************************************\nmodule \"aft\" {\n    source = \"github.com\/aws-ia\/terraform-aws-control_tower_account_factory\"\n    \n    # Required Vars\n    ct_management_account_id    = \"121212121212\"\n    log_archive_account_id      = \"343434343434\"\n    audit_account_id            = \"565656565656\"\n    aft_management_account_id   = \"787878787878\"\n    ct_home_region              = \"ap-south-1\"\n    tf_backend_secondary_region = \"ap-southeast-1\"\n\n    # Optional vars\n    terraform_distribution = \"oss\"  # Default - supports oss, tfc, or tfe\n    vcs_provider           = \"codecommit\"   # Default - supports codecommit, bitbucket, github, or githubenterprise\n\n    # Optional Repo Names\n    account_request_repo_name = \"blazeclan-aft-account-request\"\n    global_customizations_repo_name = \"blazeclan-aft-global-customizations\"\n    account_customizations_repo_name = \"blazeclan-aft-account-customizations\"\n    account_provisioning_customizations_repo_name = \"blazeclan-aft-account-provisioning-customizations\"\n\n    # Optional Feature Flags\n    aft_feature_delete_default_vpcs_enabled = false # Default\n    aft_feature_cloudtrail_data_events      = false # Default\n    aft_feature_enterprise_support          = false # Default\n\n    # AFT Vpc\n    aft_vpc_endpoints = false\n}\n\n*****************************************************************\n<\/code>\n<\/pre>\n\n\n\n<p>Below is a description of the parameters used above:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td><strong>Parameter Name<\/strong><\/td><td><strong>Type<\/strong><\/td><td><strong>Description<\/strong><\/td><\/tr><tr><td>ct_management_account_id<\/td><td>Required<\/td><td>Control Tower Management Account Id<\/td><\/tr><tr><td>log_archive_account_id<\/td><td>Required<\/td><td>Log Archive Account Id<\/td><\/tr><tr><td>audit_account_id<\/td><td>Required<\/td><td>Audit Account Id<\/td><\/tr><tr><td>aft_management_account_id<\/td><td>Required<\/td><td>Account Id of dedicated AWS account for AFT<\/td><\/tr><tr><td>ct_home_region<\/td><td>Required<\/td><td><strong>Must<\/strong>&nbsp;be set as the AWS Region where Control Tower is deployed. AFT uses this region for resource deployment as well as the primary region for Terraform State storage.<\/td><\/tr><tr><td>tf_backend_secondary_region<\/td><td>Required<\/td><td>Secondary Region for Terraform State storage<\/td><\/tr><tr><td>terraform_distribution<\/td><td>Optional<\/td><td>Select between Terraform open source (default), Enterprise, or Cloud<\/td><\/tr><tr><td>vcs_provider<\/td><td>Optional<\/td><td>Selection of VCS provider for AFT repositories AWS CodeCommit (default), GitHub, GitHub Enterprise, or BitBucket<\/td><\/tr><tr><td>account_request_repo_name<\/td><td>Optional<\/td><td>Repository name for the account request files. For non-CodeCommit repos, name should be in the format of Org\/Repo<\/td><\/tr><tr><td>global_customizations_repo_name<\/td><td>Optional<\/td><td>Repository name for the global customization files. For non-CodeCommit repos, name should be in the format of Org\/Repo<\/td><\/tr><tr><td>account_customizations_repo_name<\/td><td>Optional<\/td><td>Repository name for the account customizations files. For non-CodeCommit repos, name should be in the format of Org\/Repo<\/td><\/tr><tr><td>account_provisioning_customizations_repo_name<\/td><td>Optional<\/td><td>Repository name for the account provisioning customizations files. For non-CodeCommit repos, name should be in the format of Org\/Repo<\/td><\/tr><tr><td>aft_feature_delete_default_vpcs_enabled<\/td><td>Optional<\/td><td>Feature flag toggling deletion of default VPCs on\/off for vended accounts<\/td><\/tr><tr><td>aft_feature_cloudtrail_data_events<\/td><td>Optional<\/td><td>Feature flag toggling CloudTrail data events on\/off for vended accounts<\/td><\/tr><tr><td>aft_feature_enterprise_support<\/td><td>Optional<\/td><td>Feature flag toggling Enterprise Support enrollment on\/off for vended accounts<\/td><\/tr><tr><td>aft_vpc_endpoints<\/td><td>Optional<\/td><td>Flag turning VPC endpoints on\/off for AFT VPC<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Please refer to the instructions in the&nbsp;<a href=\"https:\/\/docs.aws.amazon.com\/controltower\/latest\/userguide\/aft-getting-started.html\">AWS documentation<\/a>&nbsp;for detailed deployment steps and the&nbsp;<a href=\"https:\/\/github.com\/aws-ia\/terraform-aws-control_tower_account_factory\">AFT Module<\/a>&nbsp;README for available parameters and options. Once the&nbsp;<em>main.tf<\/em>&nbsp;file is ready with the required parameter values, the AFT module can be deployed by using the below standard terraform commands:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>$ terraform init\n$ terraform apply<\/code><\/pre>\n\n\n\n<p>This operation will deploy approximately 300+ resources across all Control Tower accounts and will take about 30 mins to complete. Good time to grab a coffee!<\/p>\n\n\n\n<p>To deploy AFT module resources, Terraform initially authenticates with the Control Tower Management account and then assumes the AWS Control Tower Execution role to deploy resources to other Control Tower accounts. Once the operation is complete, we then login to the AFT-Management account to have a look around. We navigate to CodeCommit and see 4 empty repositories created.<\/p>\n\n\n\n<p>These repositories can now be used to trigger the AFT workflow pipelines for account provisioning, customizations and management. We are now all set to start on our journey with the AFT Module.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"300\" src=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-3X-1024x300.png\" alt=\"\" class=\"wp-image-24201\" srcset=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-3X-1024x300.png 1024w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-3X-300x88.png 300w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-3X-768x225.png 768w, https:\/\/blazeclan.com\/wp-content\/uploads\/2022\/04\/Picture-3X.png 1126w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Learn More<\/h2>\n\n\n\n<p>To see the AFT account provisioning and customization pipelines in action,&nbsp;<a href=\"https:\/\/us06web.zoom.us\/webinar\/register\/WN_oQ_-OvsVQFSnPPr7NRIAQg\" class=\"broken_link\">register for our upcoming webinar on 19<sup>th<\/sup>&nbsp;May 2022.<\/a><\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>An AWS Landing Zone provides the perfect platform for customers to set up a secure, multi-account AWS environment based on AWS best practices. This is done by implementing the initial security baseline, core AWS accounts, and resources. The AWS Control Tower has become the de facto standard for quick and easy deployment of the Landing [&hellip;]<\/p>\n","protected":false},"author":192,"featured_media":37998,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[922,1144],"tags":[1410,1209,1113,1211,1079,4670],"class_list":["post-38021","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-en-eu","category-cloud-security-en-eu","tag-automation-en-eu","tag-aws-cloud-en-eu","tag-cloud-security-en-eu","tag-compliance-en-eu","tag-security-en-eu","tag-well-architected-en-eu"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan<\/title>\n<meta name=\"description\" content=\"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan\" \/>\n<meta property=\"og:description\" content=\"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\" \/>\n<meta property=\"og:site_name\" content=\"Blazeclan\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/blazeclan.hq\/\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-30T18:05:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-19T05:43:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1680\" \/>\n\t<meta property=\"og:image:height\" content=\"680\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Team Blazeclan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@blazeclan_hq\" \/>\n<meta name=\"twitter:site\" content=\"@blazeclan_hq\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Team Blazeclan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\"},\"author\":{\"name\":\"Team Blazeclan\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/779910eccddff4a1ea6663b6bfb271e8\"},\"headline\":\"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform\",\"datePublished\":\"2022-04-30T18:05:00+00:00\",\"dateModified\":\"2024-03-19T05:43:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\"},\"wordCount\":1063,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#organization\"},\"image\":{\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg\",\"keywords\":[\"Automation\",\"AWS Cloud\",\"Cloud Security\",\"Compliance\",\"Security\",\"Well Architected\"],\"articleSection\":[\"Cloud\",\"Cloud Security\"],\"inLanguage\":\"en-EU\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\",\"url\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\",\"name\":\"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan\",\"isPartOf\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg\",\"datePublished\":\"2022-04-30T18:05:00+00:00\",\"dateModified\":\"2024-03-19T05:43:00+00:00\",\"description\":\"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.\",\"breadcrumb\":{\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#breadcrumb\"},\"inLanguage\":\"en-EU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-EU\",\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage\",\"url\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg\",\"contentUrl\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg\",\"width\":1680,\"height\":680},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blazeclan.com\/en-eu\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#website\",\"url\":\"https:\/\/blazeclan.com\/en-eu\/\",\"name\":\"Blazeclan\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blazeclan.com\/en-eu\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-EU\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#organization\",\"name\":\"Blazeclan\",\"url\":\"https:\/\/blazeclan.com\/en-eu\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-EU\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2024\/10\/ITCI-Blazeclan_logo.svg\",\"contentUrl\":\"https:\/\/blazeclan.com\/wp-content\/uploads\/2024\/10\/ITCI-Blazeclan_logo.svg\",\"caption\":\"Blazeclan\"},\"image\":{\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/blazeclan.hq\/\",\"https:\/\/x.com\/blazeclan_hq\",\"https:\/\/www.instagram.com\/blazeclantechnologies\/\",\"https:\/\/www.linkedin.com\/company\/blazeclan-technologies\/\",\"https:\/\/www.youtube.com\/channel\/UCCKF4Lcbtus-pUoZr7Lxrow\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/779910eccddff4a1ea6663b6bfb271e8\",\"name\":\"Team Blazeclan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-EU\",\"@id\":\"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a43c1fa01bb3c7e839254c9084bf11ed422d7e633231f9e935096045af416ba2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a43c1fa01bb3c7e839254c9084bf11ed422d7e633231f9e935096045af416ba2?s=96&d=mm&r=g\",\"caption\":\"Team Blazeclan\"},\"sameAs\":[\"http:\/\/localhost\/ps-local-wp\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan","description":"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/","og_locale":"en_US","og_type":"article","og_title":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan","og_description":"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.","og_url":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/","og_site_name":"Blazeclan","article_publisher":"https:\/\/www.facebook.com\/blazeclan.hq\/","article_published_time":"2022-04-30T18:05:00+00:00","article_modified_time":"2024-03-19T05:43:00+00:00","og_image":[{"width":1680,"height":680,"url":"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg","type":"image\/jpeg"}],"author":"Team Blazeclan","twitter_card":"summary_large_image","twitter_creator":"@blazeclan_hq","twitter_site":"@blazeclan_hq","twitter_misc":{"Written by":"Team Blazeclan","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#article","isPartOf":{"@id":"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/"},"author":{"name":"Team Blazeclan","@id":"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/779910eccddff4a1ea6663b6bfb271e8"},"headline":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform","datePublished":"2022-04-30T18:05:00+00:00","dateModified":"2024-03-19T05:43:00+00:00","mainEntityOfPage":{"@id":"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/"},"wordCount":1063,"commentCount":0,"publisher":{"@id":"https:\/\/blazeclan.com\/en-eu\/#organization"},"image":{"@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage"},"thumbnailUrl":"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg","keywords":["Automation","AWS Cloud","Cloud Security","Compliance","Security","Well Architected"],"articleSection":["Cloud","Cloud Security"],"inLanguage":"en-EU","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blazeclan.com\/en-eu\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/","url":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/","name":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform - Blazeclan","isPartOf":{"@id":"https:\/\/blazeclan.com\/en-eu\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage"},"image":{"@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage"},"thumbnailUrl":"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg","datePublished":"2022-04-30T18:05:00+00:00","dateModified":"2024-03-19T05:43:00+00:00","description":"Effortlessly navigate AWS Control Tower for seamless management of your AWS Landing Zone with expert insights and practical guidance.","breadcrumb":{"@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#breadcrumb"},"inLanguage":"en-EU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/"]}]},{"@type":"ImageObject","inLanguage":"en-EU","@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#primaryimage","url":"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg","contentUrl":"https:\/\/blazeclan.com\/wp-content\/uploads\/2023\/02\/Blazeclan_blog-post-img.jpg","width":1680,"height":680},{"@type":"BreadcrumbList","@id":"https:\/\/blazeclan.com\/blog\/manage-an-aws-landing-zone-using-aws-control-tower-account-factory-for-terraform\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blazeclan.com\/en-eu\/"},{"@type":"ListItem","position":2,"name":"Manage an AWS Landing Zone using AWS Control Tower Account Factory for Terraform"}]},{"@type":"WebSite","@id":"https:\/\/blazeclan.com\/en-eu\/#website","url":"https:\/\/blazeclan.com\/en-eu\/","name":"Blazeclan","description":"","publisher":{"@id":"https:\/\/blazeclan.com\/en-eu\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blazeclan.com\/en-eu\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-EU"},{"@type":"Organization","@id":"https:\/\/blazeclan.com\/en-eu\/#organization","name":"Blazeclan","url":"https:\/\/blazeclan.com\/en-eu\/","logo":{"@type":"ImageObject","inLanguage":"en-EU","@id":"https:\/\/blazeclan.com\/en-eu\/#\/schema\/logo\/image\/","url":"https:\/\/blazeclan.com\/wp-content\/uploads\/2024\/10\/ITCI-Blazeclan_logo.svg","contentUrl":"https:\/\/blazeclan.com\/wp-content\/uploads\/2024\/10\/ITCI-Blazeclan_logo.svg","caption":"Blazeclan"},"image":{"@id":"https:\/\/blazeclan.com\/en-eu\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/blazeclan.hq\/","https:\/\/x.com\/blazeclan_hq","https:\/\/www.instagram.com\/blazeclantechnologies\/","https:\/\/www.linkedin.com\/company\/blazeclan-technologies\/","https:\/\/www.youtube.com\/channel\/UCCKF4Lcbtus-pUoZr7Lxrow"]},{"@type":"Person","@id":"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/779910eccddff4a1ea6663b6bfb271e8","name":"Team Blazeclan","image":{"@type":"ImageObject","inLanguage":"en-EU","@id":"https:\/\/blazeclan.com\/en-eu\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a43c1fa01bb3c7e839254c9084bf11ed422d7e633231f9e935096045af416ba2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a43c1fa01bb3c7e839254c9084bf11ed422d7e633231f9e935096045af416ba2?s=96&d=mm&r=g","caption":"Team Blazeclan"},"sameAs":["http:\/\/localhost\/ps-local-wp"]}]}},"_links":{"self":[{"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/posts\/38021","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/users\/192"}],"replies":[{"embeddable":true,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/comments?post=38021"}],"version-history":[{"count":0,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/posts\/38021\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/media\/37998"}],"wp:attachment":[{"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/media?parent=38021"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/categories?post=38021"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blazeclan.com\/en-eu\/wp-json\/wp\/v2\/tags?post=38021"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}