AWS Control Tower Account Factory for Terraform (AFT)

AWS Control Tower Account Factory for Terraform (AFT) (Nov 2021)

• https://docs.aws.amazon.com/controltower/latest/userguide/taf-account-provisioning.html

Examples

Official example:

module "aft" {
 source = "[email protected]:aws-ia/terraform-aws-control_tower_account_factory.git"

 # Required Parameters
 ct_management_account_id    = "123412341234"
 log_archive_account_id      = "234523452345"
 audit_account_id            = "345634563456"
 aft_management_account_id   = "456745674567"
 ct_home_region              = "us-east-1"
 tf_backend_secondary_region = "us-west-2"

 # Optional Parameters
 terraform_distribution = "oss"
 vcs_provider           = "codecommit"

 # Optional Feature Flags
 aft_feature_delete_default_vpcs_enabled = false
 aft_feature_cloudtrail_data_events      = false
 aft_feature_enterprise_support          = false
}

Related

• AWS Control Tower
• Terraform: Terraform AWS provider
• AWS Control Tower Account Factory

See also

• AWS, AWS Management & Governance, AWS Organizations, AWS CloudTrail, AWS Control Tower, AWS Resource Access Manager (RAM), AWS Service Catalog, AWS Landing Zone, AWS SSO

https://aws.amazon.com/blogs/aws/new-aws-control-tower-account-factory-for-terraform/