It's been two months since this profile received a new review

AWS Control Tower Reviews & Product Details

AWS Control Tower is a managed service that simplifies the setup and governance of secure, multi-account AWS environments. It automates the creation of a well-architected landing zone, incorporating best practices for security, compliance, and operations. By orchestrating various AWS services, AWS Control Tower enables organizations to establish a standardized and secure cloud environment efficiently. Key Features and Functionality: - Landing Zone: Automates the setup of a secure, multi-account AWS environment based on best practices, including identity management, logging, and security controls. - Account Factory: Provides a configurable account template to standardize the provisioning of new AWS accounts with pre-approved configurations, facilitating consistent and compliant account creation. - Control Catalog: Offers a centralized repository of over 750 preconfigured controls, allowing organizations to enforce governance policies across their AWS environment. These controls include preventive, detective, and proactive measures to maintain compliance and security. - Dashboard: Provides a centralized interface for monitoring the compliance status of accounts and organizational units, offering visibility into noncompliant resources and overall governance posture. Primary Value and Problem Solved: AWS Control Tower addresses the complexity of managing multiple AWS accounts by providing a centralized, automated solution for establishing and maintaining a secure and compliant cloud environment. It reduces the time and effort required to set up multi-account environments, enforces consistent governance policies, and enhances visibility into compliance status. This enables organizations to focus on innovation and business objectives while ensuring their AWS infrastructure adheres to best practices and regulatory requirements.

Seller

Amazon Web Services (AWS)

Discussions

AWS Control Tower Community

Value at a Glance

Averages based on real user reviews.

Perceived Cost

$$$$$

View More Pricing Information

Top-Rated Alternatives

Microsoft Defender for Cloud

4.4/5

(275)

Google Cloud Platform Security Overview

View All Alternatives

AWS Control Tower Reviews (21)

G2 reviews are authentic and verified.

Here's how.

Ashish G.

Data Platform Consultant

Information Technology and Services

Mid-Market (51-1000 emp.)

7/2/2025

"A centralized unit to manage and trace the landing zones"

4.5/5

What do you like best about AWS Control Tower?

A central control unit that stays on top of the organization, helping you create multiple zones or accounts that facilitate easy tracing and management. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

I did not find any disks with this tool, it's very effective for AWS enable organizations Review collected by and hosted on G2.com.

Shubham J.

Executive

Enterprise (> 1000 emp.)

3/8/2024

"Control and govern multiple accounts."

4.5/5

What do you like best about AWS Control Tower?

For any organization it is such a best features to give variable access to the multiple accounts and control all of them from single point of control tower.

No messed up , no security breach just perfect for any organization security and role. To get compliant and support in organization we must choose this. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

Configurations are difficult to put for different people , different role. To see and control exactly from the tower its definitely not easy for a Non Tech guy. Review collected by and hosted on G2.com.

Srinath K.

Consultant - Cloud and DevOps

Enterprise (> 1000 emp.)

1/13/2024

"Accelerate your Infrastructure deployment on AWS at ease using AWS Control Tower!"

5/5

What do you like best about AWS Control Tower?

I have used AWS Control Tower on many enterprise projects. Here is my taught aout it,

1 - Creating Multi-Account AWS Environment is very easy using AWS Control Tower.

2 - It used Organizations to govern all the AWS Accounts.

3 - It has Organization trails and it helps logs all the events on all the accounts associated with it.

4 - Has Security hub Dashboard which helps monitor AWS Accounts. It collects data from Inspector, Guard Duty, Macie, Firewall etc,

5 - It supports AWS Guard Duty, that is a threat detection system, which can monitor Route 53, Cloud Trail, VPC Flow logs, etc.

6 - It also supports Inspector, Usually used for Network and Host assessment.

7 - Easy to use and integrate and provides lots of control over AWS accounts, Has excellent AWS customer Support for all type of plans(Basic, Business, etc).

8 - It has a very good Documentation and community support which makes it easy to implement. It is one of the reason why it is widely used across various exterprise organizations. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

I have very few to highlight from my experience using the tool,

1 - It has AWS Security Hub and it is limited to be enabled on one region on all accounts and time.

2 - You must stick with AWS for all your infrastructre (accounts). Which sometimes make is difficult for big organizations to decide for theie application.

3 - It is also unavailable on few regions like - Hyderabad, Jakarta and Osaka, Spain, Zurich.

4 - It supports only 10 concurrent operations and which makes it slow in-terms of provisioning/creation time.

I came across these difficulties so far nothing much to say about the problems in control tower Review collected by and hosted on G2.com.

What problems is AWS Control Tower solving and how is that benefiting you?

From my experice using control tower, Many companies face difficulties in setting up/Govern their infrastructure in a well architected way,

For example -

Admin Account - Complete control over other accounts , enfore policy ;

Network Account - Handle all the Network In/Out on the Infra ;

Application specific Accounts - Dev/UAT,PROD accounts as per Application needs.

Creating this manually makes life difficult for infra engineers, But using Control Tower and Landing Zone makes it easy.

Using AWS Control Tower, We can easily Govern the AWS Accounts, By Enforcing the SCP's on all accounts, Deny certian action explicitely on all accounts.

Using IAM Access Analyzer, AWS Security Hub, AWS Guard Duty, AWS Inspector makes it easy to Govern the Infrastructurein a easier way Review collected by and hosted on G2.com.

Arun Kumar S.

Engineering Leader (Digital Marketplace)

Mid-Market (51-1000 emp.)

1/14/2024

"Great Centralised service to overlook services across aws account"

4.5/5

What do you like best about AWS Control Tower?

Its centralized way of supporting multiple accounts and getting summary at one place. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

Nothing as such. A bit complex for a newbie to understand. Review collected by and hosted on G2.com.

Harshit L.

Security Consultant

Enterprise (> 1000 emp.)

1/12/2024

"Aws control tower"

3.5/5

What do you like best about AWS Control Tower?

Govern and secure multi account AWS environment Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

Complex architectures with complex design and other cloud environment are not included Review collected by and hosted on G2.com.

Verified User in Broadcast Media

Small-Business (50 or fewer emp.)

1/13/2024

"AWS Control Tower - efficient tool for account provisioning"

3.5/5

What do you like best about AWS Control Tower?

I like that everything is centralized and service control policies can be implemented quickly. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

Decommisioning landing zones can sometimes be challenging. Review collected by and hosted on G2.com.

Verified User in Retail

Enterprise (> 1000 emp.)

11/28/2023

"AWS Control Tower"

5/5

What do you like best about AWS Control Tower?

Can create and manage all subaccounts as one place. Customer support is good. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

Cannot use the same business support level to all sub accounts. Review collected by and hosted on G2.com.

Nabeel B.

Identity Management & Security Specialist

Mid-Market (51-1000 emp.)

6/28/2022

"Improves productivity and no dependency"

4.5/5

What do you like best about AWS Control Tower?

We moved most of the on prem to cloud AWS, using control tower it helped us to anlyze requirement and upscale capacity accordingly no more waiting on vendors for deliverables Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

I cannot think of any at the moment of course it's pricey, Review collected by and hosted on G2.com.

Recommendations to others considering AWS Control Tower:

Reliable and robust Review collected by and hosted on G2.com.

What problems is AWS Control Tower solving and how is that benefiting you?

We can enhance our security based on our business requirements, purchase or increase our capacity on our own and no more waiting for anyone hence improving our timelines for deliverables Review collected by and hosted on G2.com.

ಮ

ಮನು .

Senior Engineer - SCM

Small-Business (50 or fewer emp.)

9/11/2021

"Landing zone"

5/5

What do you like best about AWS Control Tower?

View policy-level summaries of your AWS environment. Automate ongoing policy management. Quickly setup and configure a new AWS environment. Review collected by and hosted on G2.com.

What do you dislike about AWS Control Tower?

It limit of 5 SCPs per OU applies to OUs. Existing OUs with over 300 accounts cannot be registered or re-registered in AWS Control Tower. Review collected by and hosted on G2.com.