What You'll Learn

AWS Secure Landing Zone with Control Tower & AFT

Build a production-grade AWS Landing Zone with centralized governance, strong security baselines, and fully automated account provisioning using Control Tower and Terraform AFT.

Control Tower Landing Zone AFT AWS Organizations

What you will build

You'll design and deploy a complete AWS Secure Landing Zone using AWS Control Tower, configure governance guardrails, and automate account creation using Account Factory for Terraform (AFT).

Secure multi-account architecture

Proper OU design, isolation, and enterprise-grade structure.

Governance & guardrails

Logging, monitoring, and org-wide security enforcement.

Full automation with Terraform

Provision accounts automatically using Git-based workflows.

Core Topics

Landing Zone architecture fundamentals

AWS Organizations structure and governance

AWS Control Tower deployment and configuration

Account structure: security, log archive, workloads

Security services integration

AFT automation pipeline

Automation & DevOps Focus

Terraform-based account provisioning

Git-driven infrastructure workflows

Account baselines as code

CI/CD provisioning pipelines

Repeatable infrastructure patterns

Security Services Used

CloudTrail, Config, GuardDuty

Security Hub, Inspector

KMS encryption

IAM Access Analyzer

S3 centralized logging

Landing Zone Automation Workflow

Why take this course?

By the end of this course, you will have a fully functional, secure, and automated AWS Landing Zone aligned with AWS enterprise best practices.

Your infrastructure will be scalable, governed, auditable, and completely managed through Infrastructure as Code.

AWS SECURE LANDING
ZONE WITH CONTROL TOWER AND AFT

Duration

Level

Format

Support

What You'll Learn

AWS Secure Landing Zone with Control Tower & AFT