---
# System prepended metadata

title: AWS Control Tower Activation Day

---

# AWS Control Tower Activation Day

### Site -  https://controltoweractivationday0820.splashthat.com/

# Agenda
09:00AM - 09:15AM - Kick-Off + Introduções
09:15AM - 09:45AM - Padrões de Governança de Múltiplas Contas / AWS Organizations
09:45AM – 10:45AM - Visão Geral AWS Control Tower

10:45AM - 11:10AM - Break

11:10AM – 11:50AM - AWS Control Tower - Demo
11:50AM – 12:30AM - Customização do AWS Control Tower
12:30AM – 12:50AM - Kahoot e Premiação Alexa
12:50AM – 13:05AM - Introdução aos Laboratórios (escolha entre mais de 15) 
13:05AM – 14:00AM - Implementação Laboratórios


## Survey (ao final) - https://survey.immersionday.com/Sn8A9JnnR 

## Main Chime Room - https://chime.aws/2297416980

## Apresentações Power Point: https://notasdofelip.s3.amazonaws.com/ad/Control+Tower+Activation+day+-+20082021.zip


## Breakout rooms



| Empresas | Ambassador | Chime Room |
| -------- | -------- | -------- |
| Samsung, Hypeflame, CEA, C&A, Americanas, Embraer, Ipiranga, Apdata do Brasil, Quali, Kandgi, Darede      | Felipe de Bene     | https://chime.aws/8250437490     |
| JW Consultoria, Solvis, JoaO, Infomach, SoftwareOne, BR Link, , MC1 Tecnologia, Grupo NC, Compasso/UOL, Hx Brasil Informatica, SENAI | André Kalsing |  https://chime.aws/3676733811 |
| Grupo Carrefour, 	PF/Conne, James Delivery, Daitan Labs, Taesa, Perfil Comércio, Computti, VALCANN, ConectCar, INT Solutions | Roberto Silva | https://chime.aws/2706646546|
|  |Robert da Costa| Sala principal |
| Itaú, Nubank, Banco Original, Picpay, Porto Seguro, NPO SISTEMAS, Grupo Ultrapar, Fast Shop, Grupo Fleury, CIP | Guilherme Greco| https://chime.aws/9228147882|
| Ipsense, Santa Claus, FCA - Fiat Chrysler Automobiles, 	Dom Rock, Accenture, Novo Nordisk, MAHLE, Cencosud, Tivit, GFT, Yandeh |Kimmy Wu | https://chime.aws/8012237822|

*  **Here is the URL for the self-paced labs:**
https://controltower.aws-management.tools/

## **Useful Links:**
[Control Tower Getting Started Guide](https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html)
[AWS Secure Account Setup](https://aws.amazon.com/answers/security/aws-secure-account-setup/)
[Getting Started: Follow Security Best Practices as You Configure Your AWS Resources](https://aws.amazon.com/blogs/security/getting-started-follow-security-best-practices-as-you-configure-your-aws-resources/)
[Building a Scalable and Secure Multi-VPC AWS Network Infrastructure](https://d1.awsstatic.com/whitepapers/building-a-scalable-and-secure-multi-vpc-aws-network-infrastructure.pdf)
[AWS Service Catalog Connector for ServiceNow](https://aws.amazon.com/blogs/aws/new-aws-service-catalog-connector-for-servicenow/)
[Automating AWS Security Hub Alerts wiht AWS Control Tower lifecycle events](https://aws.amazon.com/blogs/mt/automating-aws-security-hub-alerts-with-aws-control-tower-lifecycle-events/)

## **Control Tower Lifecycle**
https://docs.aws.amazon.com/controltower/latest/userguide/lifecycle-events.html

##  **IMPORTANT: AWS Control Tower can be deployed in Existing Organizations:**
https://aws.amazon.com/pt/blogs/architecture/field-notes-enroll-existing-aws-accounts-into-aws-control-tower/

**Youtube:** https://www.youtube.com/watch?v=-n65I4M8cas

## **IMPORTANT: Customizations for AWS Control Tower**
https://aws.amazon.com/pt/solutions/implementations/customizations-for-aws-control-tower/
![](https://i.imgur.com/9MmbxBy.png)

**Doc:** https://docs.aws.amazon.com/solutions/latest/customizations-for-aws-control-tower/welcome.html

## **Field Notes: Customizing the AWS Control Tower Account Factory with AWS Service Catalog**
https://aws.amazon.com/pt/blogs/architecture/field-notes-customizing-the-aws-control-tower-account-factory-with-aws-service-catalog/

## **Manage Control Tower life cycle actions intelligently using AWS Service Catalog, AWS Config, Amazon DynamoDB and AWS CloudFormation**
https://aws.amazon.com/pt/blogs/mt/manage-control-tower-life-cycle-actions-aws-service-catalog-aws-config-amazon-dynamodb-aws-cloudformation/

## **Customizing account configuration with AWS Control Tower lifecycle events**
https://aws.amazon.com/blogs/mt/customizing-account-configuration-aws-control-tower-lifecycle-events/

## **Enabling guardrails in new AWS Regions the AWS Control Tower supports**
https://aws.amazon.com/blogs/field-notes/enabling-guardrails-in-new-aws-regions-the-aws-control-tower-supports/

## **Contas de Experimentação – Como implantar uma solução sem servidor para recursos efêmero** - in Portuguese
Este blog post apresenta uma solução para gerenciar o ciclo de vida de uma conta AWS separada que fica dedicada para experimentação:
https://aws.amazon.com/pt/blogs/aws-brasil/contas-de-experimentacao-como-implantar-uma-solucao-sem-servidor-para-recursos-efemeros/

## **How to automate the creation of multiple accounts in AWS Control Tower**
https://aws.amazon.com/pt/blogs/mt/how-to-automate-the-creation-of-multiple-accounts-in-aws-control-tower/

## **Enabling Amazon GuardDuty in AWS Control Tower using Delegated Administrator**
https://aws.amazon.com/blogs/mt/automating-amazon-guardduty-deployment-in-aws-control-tower/

##  **AWS Control Tower with Firewall Manager**
https://www.youtube.com/watch?v=wocz0drq8-8

##  **How to Detect and Mitigate Guardrail Violations with AWS Control Tower**
https://www.youtube.com/watch?v=HuVZqx8IHd4


## **Automating Service Limit Increases and Enterprise Support with AWS Control Tower**
https://aws.amazon.com/pt/blogs/mt/automating-service-limit-increases-enterprise-support-aws-control-tower/

# AWS Control Tower Partners Solutions
https://aws.amazon.com/marketplace/solutions/control-tower/

## **Monitoring resources in an AWS Control Tower environment using Splunk from AWS Marketplace**
https://aws.amazon.com/pt/blogs/awsmarketplace/monitoring-resources-in-an-aws-control-tower-environment-using-splunk-from-aws-marketplace/

## **Automate your network setup in AWS Control Tower using Aviatrix**
https://aws.amazon.com/pt/blogs/awsmarketplace/automate-your-network-setup-in-aws-control-tower-using-aviatrix/

## **Log analysis with AWS Control Tower and Logz.io**
https://aws.amazon.com/pt/blogs/awsmarketplace/log-analysis-with-aws-control-tower-and-logz-io/

## **Enhance AWS Control Tower multi-account observability with Sumo Logic**
https://aws.amazon.com/pt/blogs/awsmarketplace/enhance-aws-control-tower-multi-account-observability-with-sumo-logic/

## **Integrating Alert Logic Managed Detection and Response with AWS Control Tower**
https://aws.amazon.com/pt/blogs/awsmarketplace/integrating-alert-logic-managed-detection-and-response-with-aws-control-tower/

## **Solutions integrated with AWS Control Tower are now available in AWS Marketplace**
https://aws.amazon.com/pt/blogs/awsmarketplace/solutions-integrated-with-aws-control-tower-are-now-available-in-aws-marketplace/

## **Full-stack observability of your AWS Control Tower landing zone with New Relic**
https://aws.amazon.com/pt/blogs/awsmarketplace/full-stack-observability-of-your-aws-control-tower-landing-zone-with-new-relic/

# **AWS SSO**

##  **AWS SSO allows automatic provisioning through SCIM:**
Evolution of Single Sign-on - Integrate with Azure AD with automatic user provisioning:
https://aws.amazon.com/blogs/aws/the-next-evolution-in-aws-single-sign-on/

##  **AWS SSO with AWS CLI 2.0:**
With AWS CLI 2.0 you can easily configure one or more of your AWS CLI named profiles (https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-profiles.html) to use a role from AWS SSO
https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html

## **Provisioning Users in AWS Control Tower Using AWS SSO**
https://www.youtube.com/watch?v=y_n9xN5mg1g

# Other Topics
##  **Serverless Transit Network Orchestrator (STNO)**
The Serverless Transit Network Orchestrator (STNO) solution adds automation to AWS Transit Gateway. This solution provides the tools necessary to automate the process of setting up and managing transit networks in distributed AWS environments. A web interface is created to help control, audit, and approve (transit) network changes. STNO supports both AWS Organizations (https://aws.amazon.com/organizations/) and standalone AWS account types.
https://aws.amazon.com/solutions/implementations/serverless-transit-network-orchestrator/

![](https://i.imgur.com/pPvcouT.png)


# AWS Config
##  **AWS Config Conformance Packs:**
You can prepare accounts to get enrolled in Control Tower, with Conformance Packs:
https://docs.aws.amazon.com/config/latest/developerguide/aws-control-tower-detective-guardrails.html

https://www.youtube.com/watch?v=YCUNNQuGZfg

Remediate Non-Compliance Using AWS Config Rules and a Custom SSM Document
https://www.youtube.com/watch?v=CyyNlyAHs0A

## **Extend AWS Control Tower governance using AWS Config Conformance Packs**
https://aws.amazon.com/pt/blogs/mt/extend-aws-control-tower-governance-using-aws-config-conformance-packs/

## **AWS Control Tower Detective Guardrails as an AWS Config Conformance Pack**
https://aws.amazon.com/pt/blogs/mt/aws-control-tower-detective-guardrails-as-an-aws-config-conformance-pack/

AWS Control Tower Detective Guardrails as an AWS Config Conformance Pack
https://aws.amazon.com/pt/blogs/mt/aws-control-tower-detective-guardrails-as-an-aws-config-conformance-pack/


# AWS Organizations

## **Best Practices for Organizations**
https://aws.amazon.com/pt/blogs/mt/best-practices-for-organizational-units-with-aws-organizations/


## **Building a Shared Account Structure Using AWS Organizations**
https://aws.amazon.com/pt/blogs/architecture/field-notes-building-a-shared-account-structure-using-aws-organizations/

