Control Tower managed organizations

The Innovation Sandbox on AWS solution creates an account pool organizational unit (default: InnovationSandboxAccountPool) when you deploy the Account Pool Stack. This OU is created through AWS Organizations and is not managed by Control Tower. This OU and all nested OUs do not need to be registered with Control Tower.

If you choose to register the OU within Control Tower, or deploy the OU as a nested OU in an already Control Tower-managed OU, the parent OU (InnovationSandboxAccountPool OU), nested OUs, and accounts will appear in a drifted state in the Control Tower console. This is expected behavior because the solution moves accounts between the nested OUs.