-
I have recently been trying to deploy this stack and solution to a newly setup org with control tower configured, but ran into various issues with this solution. Here is a list of problems:
1. This…
-
### Terraform Core Version
1.3.4
### AWS Provider Version
4.38.0
### Affected Resource(s)
aws_securityhub_standards_control
### Expected Behavior
When applying from the command line using the f…
-
**Is your feature request related to a problem? Please describe.**
Yes, the aws-nuke template included in DCE blows away several Control Tower resources e.g. AWS SSO roles and SAML provider, StackSet…
-
**Describe the bug**
When LZA within the Global Config file for its Repository has its configuration specified like so:
```
controlTower:
enable: true
controls: []
```
The LZA Pipelin…
-
**Describe the bug**
We are looking to enable an opt-in region for a single account. When reading https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/opt-in-regions.html …
-
Out of the [aws-securityhub-multiaccount-scripts](https://github.com/awslabs/aws-securityhub-multiaccount-scripts) the [aws-control-tower-securityhub-enabler](https://github.com/aws-samples/aws-contro…
-
The default setting of EnableCloudTrail=True is dangerous and can cause a major AWS bill. AWS Cloud Trail is free for 1 subscription but this stack will add a new global subscription each time it's de…
-
### Community Note
* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the…
-
**Is your feature request related to a problem? Please describe.**
At this moment we can only enable AWS Control Tower Controls which starts with "AWS-GR", [see](https://github.com/awslabs/landing-zo…
-
Based on the [Custom wrapper for AWS Control Tower Account Factory](https://sbstjn.com/blog/aws-control-tower-account-factory-wrapper/) blog post, we want to have a [SSM Automation](https://docs.aws.a…