AWS Secure Landing Zone with Control Tower and AFT



This course is covering the topic of "Landing Zones".

Why it's getting more and more popular in the modern setup of clouds, and how LZ helps in resolving problems of huge workloads.

Here we will discover the Landing Zones' best practices, implement them in practice on the AWS cloud, using the AWS Control Tower service, and even automate it, using the "Infrastructure as code" feature AWS Control Tower Account Factory for Terraform [AFT].

Workflow of the course :

  • Review of the problem of current Cloud setups

  • Landing Zone concept exploration

  • A detailed review of each type of the account in Landing Zone

  • Implementation of security practices on Master AWS account

  • Discovery of AWS ControlTower service

  • Implementation of the Landing Zone using the AWS Control Tower from the scratch

  • Configuring the organizational security using the AWS services

  • Discovery in details of AWS Control Tower Account Factory for Terraform

  • Automation of Landing Zone using the AFT

- - - - - - - -

List of used services/tools :

  • AWS Organizations

  • AWS ControlTower

  • AWS Service Catalog

  • AWS Config


  • AWS Budgets


  • AWS CloudTrail

  • AWS S3

  • AWS IAM Access Analyzer

  • AWS Security Hub

  • AWS GuardDuty

  • AWS Inspector

  • AWS CodePipeline

  • AWS Control Tower Account Factory for Terraform

  • Terraform CLI


  • Git

  • GitHub

As a result of this course, you will receive a fully working and protected Landing Zone on the AWS cloud, which is also automated via AFT.

This course will allow you to put the structure of your account on scripts (using the Terraform) and prepare the high level of security of your multi-account infrastructure followed by AWS whitepaper best practices.

Who this course is for:

  • Cloud engineers interested in AWS best practices
  • AWS architects who are looking for the multi-account solution
  • Engineers/Architects who are planning the migration of workloads to AWS
  • Anyone interested on ControlTower and AFT service
  • People who are working with large environments

What will you learn
  • The Landing Zone concept

  • AWS ControlTower service installation and maintaining for multi-account AWS structure

  • AWS security services implementation and usage across all accounts inside the Landing Zone

  • Best practice solutions of Landing Zone implementation on AWS cloud

  • Account Factory for Terraform (AFT) for IaC and automation of Landing Zone

  • Troubleshoot multi-account AWS architecture

  • Foundational knowledge of AWS
  • AWS account (to follow practical steps)
  • Windows / Linux / Mac OS X machine


  • 0 Lessons
  • 00:00:00 Hours

About instructor

Name : Admin Simplelearn
Reviews : 0 Reviews
Student : 1 Students
Courses : 212 Courses


Based on 0 Reviews
1 Stars
2 Stars
3 Stars
4 Stars
5 Stars