-
If Config is configured from Control Tower, it will automatically turn off global resource recording for other regions other than aggregated region. When enabling Config through LZA, there is no optio…
-
It would be nice to retrieve the dynamodb tables and s3 backends
```
⨠ terraform state list | grep "aws_s3_bucket\..*backend"
module.control_tower_aft.module.aft_backend.aws_s3_bucket.primary-bac…
-
**Describe the bug**
* new AWS account
* new set up of AWS Control Tower
* Deploy the stack into a child account
* stack fails due to two issues:
1. default limit on lambda concurrency
2. …
-
**Describe the outcome you'd like**
I would like to use Amazon's IP Address Manager [IPAM](https://docs.aws.amazon.com/vpc/latest/ipam/what-it-is-ipam.html) to manage VPC's in my Control Tower mana…
-
**Is your feature request related to a problem? Please describe.**
In our case, we use AWS Control Tower to manage the regions available in our accounts.
The GuardDuty control audits all regions, as…
-
Hello,
Since this [update ](https://aws.amazon.com/about-aws/whats-new/2023/06/aws-control-tower-account-access-configuration-flexibility/) of Control Tower it's not mandatory to assign a SSO User …
-
Subscribe to this issue and stay notified about new [weekly trending repos in HCL](https://github.com/trending/hcl?since=weekly).
-
**Is your feature request related to a problem? Please describe.**
Control Tower enables [Deny access to AWS based on the requested AWS Region](https://docs.aws.amazon.com/controltower/latest/usergui…
-
**Describe the bug**
CloudTrail logs seem to be replicated when the solution is deployed alongside AWS Control Tower.
**To Reproduce**
Steps to reproduce the behavior:
1. Deploy the solution alo…
-
I was trying to do `control-tower deploy --iaas AWS` using temporary (STS) session credentials via [aws-vault](https://github.com/99designs/aws-vault).
When trying to create the `blobstore` AWS us…