@aws-accelerator/config
    Preparing search index...

    Interface IControlTowerLandingZoneConfig

    Configure the Control Tower Landing Zone's settings.

    Key Features

    • Specify the Landing Zone Version
    • Customize log retention to meet regulatory compliance
    • Manage Identity Center Access for Control Tower Landing Zone
    landingZone:
      version: '3.3'
      logging:
        loggingBucketRetentionDays: 365
        accessLoggingBucketRetentionDays: 365
        organizationTrail: true
      security:
        enableIdentityCenterAccess: true
    interface IControlTowerLandingZoneConfig {
        version: string;
        accountAutoEnrollment?: boolean;
        logging: IControlTowerLandingZoneLoggingConfig;
        security: IControlTowerLandingZoneSecurityConfig;
    }
    Index

    Properties

    version accountAutoEnrollment? logging security

    Properties

    version: string

    Landing Zone Version (Required)

    Considerations

    • Most recent version required for landing zone updates or resets
    • Updates or resets will occur when drift is detected or any configuration change
    • If the solution needs to perform an update or reset and the version is not the most recent, the solution will fail
    accountAutoEnrollment?: boolean

    Account Auto-Enrollment (Optional)

    Enables automatic enrollment of accounts when moved between organizational units (OUs). When enabled, accounts moved into or between registered OUs automatically receive baseline resources and control configurations from the destination OU without creating inheritance drift.

    The account auto-enrollment feature is available for landing zones of version 3.1 and above.

    false

    https://docs.aws.amazon.com/controltower/latest/userguide/account-auto-enrollment.html

    logging: IControlTowerLandingZoneLoggingConfig

    Logging Configuration (Required)

    • Retention Policies: Configure log retention periods for compliance
    • Organization Trail: Enable organization-wide CloudTrail logging
    • Access Logging: Configure access log retention for audit trails

    IControlTowerLandingZoneLoggingConfig for more information.

    security: IControlTowerLandingZoneSecurityConfig

    Security Configuration (Required)

    Manage Identity Center Access for Control Tower Landing Zone.

    IControlTowerLandingZoneSecurityConfig for more information.

    Settings

    Member Visibility

    On This Page

    Control Tower Landing Zone ConfigurationExample
    Properties