# For Bessemer Trust -Deploying CT into existing Organizations

<!-- # Please fill out the survey: [here](SURVEYLINK_WITH_HTTP).-->

This is just a list of useful links related to deploying CT into existing account.

<!-- Here is the URL for the self-paced labs:
https://controltower.aws-management.tools/ -->

## Useful Links:

[Control Tower Getting Started Guide](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html)
[AWS Secure Account Setup](https://aws.amazon.com/answers/security/aws-secure-account-setup/)
[Getting Started: Follow Security Best Practices as You Configure Your AWS Resources](https://aws.amazon.com/blogs/security/getting-started-follow-security-best-practices-as-you-configure-your-aws-resources/)
[Building a Scalable and Secure Multi-VPC AWS Network Infrastructure](https://d1.awsstatic.com/whitepapers/building-a-scalable-and-secure-multi-vpc-aws-network-infrastructure.pdf)
<!--[AWS Service Catalog Connector for ServiceNow](https://aws.amazon.com/blogs/aws/new-aws-service-catalog-connector-for-servicenow/)-->
<!--[Automating AWS Security Hub Alerts wiht AWS Control Tower lifecycle events](https://aws.amazon.com/blogs/mt/automating-aws-security-hub-alerts-with-aws-control-tower-lifecycle-events/)-->

### AWS Control Tower can be deployed in Existing Organizations:

Prerequisites: https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html

How to enable CT into existing Organizations: https://docs.aws.amazon.com/controltower/latest/userguide/existing-orgs.html

How to enable CT in an existing Org video: https://www.youtube.com/watch?v=-n65I4M8cas&list=PLhr1KZpdzukcaA06WloeNmGlnM_f1LrdP&index=14

Enrolling accounts to AWS Control Tower: https://aws.amazon.com/blogs/field-notes/enroll-existing-aws-accounts-into-aws-control-tower/

<!--### GuardDuty Enabler:
Installing this Customization will enable GuardDuty in all AWS Control Tower managed accounts, with the Audit account acting as the default GuardDuty Master:
https://github.com/aws-samples/aws-control-tower-guardduty-enabler-->-->

<!--AWS Control tower can how be enabled in existing Organizations:
https://www.youtube.com/watch?v=y6QLFn00A3U (https://www.youtube.com/watch?v=y6QLFn00A3U&feature=youtu.be)-->

### AWS Config Conformance Packs:
You can prepare accounts to get enrolled in Control Tower, with Conformance Packs:
https://docs.aws.amazon.com/config/latest/developerguide/aws-control-tower-detective-guardrails.html

### AWS Service Catalog
Automate account creation
https://aws.amazon.com/blogs/mt/automate-account-creation-and-resource-provisioning-using-aws-service-catalog-aws-organizations-and-aws-lambda/

<!--### AWS SSO allows automatic provisioning through SCIM:
Evolution of Single Sign-on - Integrate with Azure AD with automatic user provisioning:
https://aws.amazon.com/blogs/aws/the-next-evolution-in-aws-single-sign-on/ -->

<!--### AWS SSO with AWS CLI 2.0:
With AWS CLI 2.0 you can easily configure one or more of your AWS CLI named profiles (https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html) to use a role from AWS SSO
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html -->

<!--### Serverless Transit Network Orchestrator (STNO)
The Serverless Transit Network Orchestrator (STNO) solution adds automation to AWS Transit Gateway. This solution provides the tools necessary to automate the process of setting up and managing transit networks in distributed AWS environments. A web interface is created to help control, audit, and approve (transit) network changes. STNO supports both AWS Organizations (https://aws.amazon.com/organizations/) and standalone AWS account types.
https://aws.amazon.com/solutions/implementations/serverless-transit-network-orchestrator/

 -->

### Upcoming Activation Days
9/9 https://aws-control-tower-training-909.splashthat.com
9/15 https://aws-control-tower-training-915.splashthat.com
9/17 https://aws-control-tower-917.splashthat.com
9/23 https://aws-control-tower-923.splashthat.com
9/24 EST https://aws-control-tower-924.splashthat.com