Multi-account landing-zone service that automates the creation of a secure, well-architected AWS environment with account factory, proactive and detective guardrails, Account Factory for Terraform (AFT), and a centralised home region with pre-configured logging and audit accounts
FluffyStack toolsJurisdictional exposure
Attributes
- SLA Uptime
- 99.9%
Sub-services (4)
Account Factory
Automated vending of new AWS accounts with baseline networking and guardrails
Guardrails
Preventive (SCP) and detective (Config Rule) controls enforced across OUs
Account Factory for Terraform
GitOps-driven account provisioning using Terraform modules and pipelines
Customisations for Control Tower
Extend the landing zone with your own CloudFormation StackSets and SCPs
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (6)
- AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
- AWS GovCloud (US-East) · AshburnAWS GovCloud (US)
- AWS GovCloud (US-West) · HillsboroAWS GovCloud (US)
- AWS European Sovereign Cloud (Brandenburg) · BrandenburgAWS European Sovereign Cloud
- China (Beijing) · BeijingAWS China (Sinnet)
- China (Ningxia) · YinchuanAWS China (NWCD)
Commercial regions (34)
Europe (8)
- Europe (Paris)
- Europe (Frankfurt)
- Europe (Ireland)
- Europe (Milan)
- Europe (Spain)
- Europe (Stockholm)
- Europe (Zurich)
- Europe (London)
North America (7)
- Canada West (Calgary)
- Canada (Central)
- Mexico (Central)
- US East (N. Virginia)
- US West (Oregon)
- US East (Ohio)
- US West (N. California)
South America (1)
- South America (São Paulo)
Asia (11)
- Asia Pacific (Hong Kong)
- Asia Pacific (Hyderabad)
- Asia Pacific (Mumbai)
- Asia Pacific (Jakarta)
- Asia Pacific (Osaka)
- Asia Pacific (Tokyo)
- Asia Pacific (Malaysia)
- Asia Pacific (Singapore)
- Asia Pacific (Seoul)
- Asia Pacific (Taipei)
- Asia Pacific (Thailand)
Oceania (3)
- Asia Pacific (Melbourne)
- Asia Pacific (Sydney)
- Asia Pacific (New Zealand)
Middle East (3)
- Middle East (Bahrain)
- Israel (Tel Aviv)
- Middle East (UAE)
Africa (1)
- Africa (Cape Town)
Tags
Equivalent services on other platforms
Managed deployment of isolated Azure environments for sensitive government and regulated workloads: a hub-and-spoke network with built-in security controls and compliance support, operated as one enclave rather than assembled by hand
Multi-cluster lifecycle management for OpenShift fleets — policy compliance, application placement, observability, and disaster recovery across regions and clouds