Summary and Quiz
Get a refresher of what you’ve learned in the “Management and Governance” section, and take a short quiz to validate your knowledge.
In this lesson, we’ll summarize what we’ve learned in this chapter and test our knowledge of the AWS services we learned with a short quiz.
Summary
Here’s a summary of the most important key takeaways from this chapter:
AWS Control Tower
AWS Control Tower is an AWS tool designed for setting up and governing a multi-account AWS cloud infrastructure, aligning with AWS best practices. It’s particularly useful for large enterprises managing numerous applications and teams on AWS.
Landing Zones: Landing Zones are pre-configured, multi-account AWS environments based on AWS best practices, providing a standardized setup for AWS accounts and resources. They utilize AWS Organization service for account structuring, AWS CloudTrail for centralized logging, and AWS Single Sign-On for identity management. A Control Tower Landing Zone includes several organizational units (OUs) like Root OU, Security OU, Sandbox OU, and Production OU, each serving specific functions in management and security.
GuardRails/Controls: Control Tower uses GuardRails (also known as Controls) for enforcing governance and compliance policies across AWS environments. There are two types:
Preventive GuardRails: Prevent policy violations using service control policies (SCPs).
Detective GuardRails: Detect and alert on non-compliance or policy deviations.
Account Factory: This feature simplifies the process of creating and managing AWS accounts. It automates account provisioning, ensuring new accounts adhere to the organization’s compliance and security standards from creation.
...