# Data retrieval APIs for AWS Control Tower
<a name="awscontroltower"></a>

AWS Control Tower provides the following APIs for data retrieval.


****  

| Actions | Description | Access level | 
| --- | --- | --- | 
| <a name="controltower-DescribeAccountFactoryConfig"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html) | Describe the current account factory configuration | Read | 
| <a name="controltower-DescribeCoreService"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared](https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#what-shared) | Describe resources managed by core accounts in AWS Control Tower | Read | 
| <a name="controltower-DescribeGuardrail"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | Describe a guardrail | Read | 
| <a name="controltower-DescribeGuardrailForTarget"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | Describe a guardrail for a organizational unit | Read | 
| <a name="controltower-DescribeLandingZoneConfiguration"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html](https://docs.aws.amazon.com/controltower/latest/userguide/step-two.html) | Describe the current Landing Zone configuration | Read | 
| <a name="controltower-DescribeManagedAccount"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html) | Describe an account created through account factory | Read | 
| <a name="controltower-DescribeManagedOrganizationalUnit"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html](https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html) | Describe an AWS Organizations organizational unit managed by AWS Control Tower | Read | 
| <a name="controltower-DescribeRegisterOrganizationalUnitOperation"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html](https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html) | Describe a Register Organizational Unit Operation  | Read | 
| <a name="controltower-DescribeSingleSignOn"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/sso.html](https://docs.aws.amazon.com/controltower/latest/userguide/sso.html) | Describe the current AWS Control Tower IAM Identity Center configuration | Read | 
| <a name="controltower-GetAccountInfo"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html](https://docs.aws.amazon.com/controltower/latest/userguide/accounts.html) | Describe an account email and validate that it exists | Read | 
| <a name="controltower-GetAvailableUpdates"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html](https://docs.aws.amazon.com/controltower/latest/userguide/configuration-updates.html) | List available updates for the current AWS Control Tower deployment | Read | 
| <a name="controltower-GetBaseline"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaseline.html) | Get Baseline details | Read | 
| <a name="controltower-GetBaselineOperation"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetBaselineOperation.html) | Get the current status of a particular Baseline operation | Read | 
| <a name="controltower-GetControlOperation"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetControlOperation.html) | Get the current status of a particular EnabledControl or DisableControl operation | Read | 
| <a name="controltower-GetEnabledBaseline"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledBaseline.html) | Get an enabled Baseline | Read | 
| <a name="controltower-GetEnabledControl"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetEnabledControl.html) | Get an enabled control from an organizational unit | Read | 
| <a name="controltower-GetGuardrailComplianceStatus"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | Get the current compliance status of a guardrail | Read | 
| <a name="controltower-GetHomeRegion"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how](https://docs.aws.amazon.com/controltower/latest/userguide/how-control-tower-works.html#region-how) | Get the home region of the AWS Control Tower setup | Read | 
| <a name="controltower-GetLandingZone"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZone.html) | Get the current status of the landing zone setup | Read | 
| <a name="controltower-GetLandingZoneDriftStatus"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/drift.html](https://docs.aws.amazon.com/controltower/latest/userguide/drift.html) | Get the current landing zone drift status | Read | 
| <a name="controltower-GetLandingZoneOperation"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_GetLandingZoneOperation.html) | Get the current status of a particular landing zone operation | Read | 
| <a name="controltower-GetLandingZoneStatus"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html#step-two) | Get the current status of the landing zone setup | Read | 
| <a name="controltower-ListBaselines"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListBaselines.html) | List Baselines | List | 
| <a name="controltower-ListControlOperations"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListControlOperations.html) | List all control operations | List | 
| <a name="controltower-ListDirectoryGroups"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/sso.html](https://docs.aws.amazon.com/controltower/latest/userguide/sso.html) | List the current directory groups available through IAM Identity Center | List | 
| <a name="controltower-ListDriftDetails"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/drift.html](https://docs.aws.amazon.com/controltower/latest/userguide/drift.html) | List occurrences of drift in AWS Control Tower | Read | 
| <a name="controltower-ListEnabledBaselines"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledBaselines.html) | List enabled Baselines | List | 
| <a name="controltower-ListEnabledControls"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListEnabledControls.html) | List all enabled controls in a specified organizational unit | List | 
| <a name="controltower-ListEnabledGuardrails"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | List currently enabled guardrails | List | 
| <a name="controltower-ListExtendGovernancePrecheckDetails"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html](https://docs.aws.amazon.com/controltower/latest/userguide/about-extending-governance.html) | List Precheck details for an Organizational Unit  | List | 
| <a name="controltower-ListExternalConfigRuleCompliance"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html](https://docs.aws.amazon.com/controltower/latest/userguide/review-compliance.html) | List the compliance of external AWS Config rules | Read | 
| <a name="controltower-ListGuardrailViolations"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | List existing guardrail violations | List | 
| <a name="controltower-ListGuardrails"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | List all available guardrails | List | 
| <a name="controltower-ListGuardrailsForTarget"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/controls.html](https://docs.aws.amazon.com/controltower/latest/userguide/controls.html) | List guardrails and their current state for a organizational unit | List | 
| <a name="controltower-ListLandingZoneOperations"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZoneOperations.html) | List all landing zone operations | List | 
| <a name="controltower-ListLandingZones"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListLandingZones.html) | List all landing zones | List | 
| <a name="controltower-ListManagedAccounts"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html) | List accounts managed through AWS Control Tower | List | 
| <a name="controltower-ListManagedAccountsForGuardrail"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html) | List managed accounts with a specified guardrail applied | List | 
| <a name="controltower-ListManagedAccountsForParent"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com/controltower/latest/userguide/account-factory.html) | List managed accounts under an organizational unit | List | 
| <a name="controltower-ListManagedOrganizationalUnits"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html](https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html) | List organizational units managed by AWS Control Tower | List | 
| <a name="controltower-ListManagedOrganizationalUnitsForGuardrail"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html](https://docs.aws.amazon.com/controltower/latest/userguide/organizations.html) | List managed organizational units that have a specified guardrail applied | List | 
| <a name="controltower-ListTagsForResource"></a>[https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/controltower/latest/APIReference/API_ListTagsForResource.html) | List the tags for a resource | Read | 
| <a name="controltower-PerformPreLaunchChecks"></a>[https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-prereqs.html) | Perform validations in an account | Read |