What is Account Factory for Terraform (AFT) Account Factory for Terraform (AFT) is a solution provided by AWS that leverages Terraform to automate and manage the creation and configuration of AWS accounts. It is designed to streamline the account provisioning process, enforce consistent configurations, and ensure governance and compliance across multiple AWS accounts. It may […]
Uninstalling Account Factory for Terraform (AFT) Read Post »
When you deploy an AWS Organization using Control Tower, an AWSSSO IdP is created in every account. It’s name ends with DO_NOT_DELETE. What happens if you delete it? Background I recently had someone reach out to me asking what happens if the auto-created AWS SSO IdP Provider that integrates with IAM Identity Center in Control
You deleted the “DO_NOT_DELETE” IdP? Read Post »
In their eagerness to launch a cloud initiative, there are still organizations that deploy new environments and resources from the AWS console. While they may believe it leads to a quick win, the reality is different. Background I spoke with an organization recently that had deployed all of their AWS resources from the console. I
Using AWS’s IaC Generator to Rescue Manual Deployments Read Post »
My previous post detailed the process to install AWS Landing Zone Accelerator (LZA) within an existing Control Tower environment. While the process wasn’t trivial or all that well documented, it did result in a successfully deployed LZA. What are the benefits that LZA provides out of the box beyond a basic Control Tower deployment? Using
AWS Landing Zone Accelerator Features: Beyond Control Tower Read Post »
