Getting Started

Begin by reviewing the AWS Control Tower Control Catalog from the home page to understand available managed controls, their associated compliance frameworks, and control metadata. To enable this experience on AWS Control Tower, select I have an existing environment and want to enable AWS-managed controls on the console. You'll then confirm your home region and optionally select additional governed regions. During setup, you can enable automatic account enrollment, which ensures accounts automatically inherit controls and configurations from their parent organizational unit (OU) when moved between OUs.