Govern and secure your multi-account environment with AWS Control Tower
About the event
About the Workshop:
You'll dive deep into AWS Control Tower's capabilities, exploring how to establish a well-architected landing zone, implement governance controls, and streamline account creation and management. Through instructor-led demonstrations and practical labs, you'll gain valuable skills in creating organizational units, enabling controls, managing network configurations, and addressing compliance issues.
AWS Control Tower offers a simple and efficient way to set up and govern a secure, multi-account AWS environment. It establishes a landing zone that is bas ed on best-practices blueprints, and it enables governance using controls you can choose from a prepackaged list. The landing zone is a well-architected, multi-account baseline that follows AWS best practices.
This event does require your own AWS account and we require customers to conduct these Workshop Prerequisites prior to the event. Also, all of the work conducted alongside our instructors should be done in a test (sandbox) environment. We do not recommend handling any production workloads during this workshop.
This Immersion Day qualifies for the AWS Control Tower Immersion Day Builder’s Quest participation badge.
Who Should Attend:
Current AWS Customers - Please make sure to complete the Workshop Prerequisites prior to the event an d bring your own AWS account to the event.
Aspiring AWS Customers - If you do not currently have an AWS account follow these simple steps. If you do not want to create an AWS account you are more than welcome to attend our event and listen to the instructors.
1. Instructions to creating a new AWS account using your company email address.
2. Instructions to launching an EC2 instance to test the newly created AWS account.
Topics Covered:
In these two section customers will learn the value proposition of AWS Control Tower and then receive training through instructor led demo’s on how to use AWS Control Tower once a landing zone is created. Key topics include:
* Introduction to AWS Control Tower
* Hands-on practice with day-to-day tasks
* Controls management for security, operational, and compliance requirements
* Enrolling existing organization units and accounts into AWS Control Tower
Section 1 – Learn about AWS Control Tower
* Welcome
* Workshop Setup
* AWS Control Tower Presentation
Section 2 – Practice with AWS Control Tower
* Lab: Introduction to AWS Control Tower
* In this lab, we will walk through some of the day-to-day Control Tower administrative tasks and see how they are done using Control Tower created resources. We will cover: Create an Organizational Unit (OU) and enable a control using the AWS Control Tower dashboard. Modify the Network configuration of Account Factory. Launch a new AWS Account using Account Factory as an AWS Control Tower Admin user. Log into the new AWS Account. Create an S3 bucket with versioning disabled. Investigate the Noncompliant resources violation captured by AWS Control Tower and take corrective action.
* Controls help you set-up governance on your multi-account environment to align with AWS best practices and common compliance frameworks. Some customers, especially those operating in a regulated industry, go through a time-consuming and expensive process of identifying risk and building their own controls that account for service relationships and their dependencies. The result is an increase in time-to-value (TTV) for new services. AWS Control Tower provides you with 400+ controls out-of-the-box to support the distinct security requirements of your workloads. In this lab, you will learn how to use AWS Control Tower Controls to help meet your organization's security, operational, and compliance requirements.
* Lab: Enrolling Existing Organizations and Accounts into AWS Control Tower
* In this lab, you will learn how to enroll your existing organization unit and accounts into the newly created AWS Control Tower environment.