You could use AWS Control Tower to provision a common set of security baseline configurations for your AWS accounts. The headaches usually start when you need to tailor your account baseline based on different types of accounts and requirements. This is where a Terraform Account Baseline can truly work its magic.
Building a Landing Zone with Account Baseline from scratch is a lot of work. Good thing we took care of that.
Based on Terraform modules, which dramatically simplifies the management.
Manage hundreds of AWS accounts across multiple regions while keeping operational overhead minimal.
Our Account Baseline is based on practical experience, best practices and the AWS Well-Architected Framework.
The Account Baseline is supposed to be as unique as the customer himself and that’s why we strongly embrace customization.
A new Account Baseline version can be tested and reviewed during pull request. The risk of critical failures can be significantly reduced by enforcing code review practices.
Implementation into an existing self-service portal can be easily achieved through a simple Git integration.
The Account Baseline is centrally managed in a Git repository via Terraform. Either a user or an automated process starts the rollout of the baseline across multiple accounts. Terraform pipelines will manage all the resources necessary for the account base configuration.
The Account Baseline includes hardening accounts, implementing compliance and security policies, and connecting accounts to the Foundation.
