About This Architecture
Enterprise cloud transformation governance architecture with AWS Organizations for multi-account management, Control Tower for landing zone, Service Catalog for approved resources, Config rules for compliance, and centralized logging via CloudTrail to S3. Includes IAM Identity Center for SSO and Security Hub for posture management across all accounts. Fork this diagram on Diagrams.so to customize the organizational units and governance controls for your enterprise landing zone. Source: https://docs.aws.amazon.com/prescriptive-guidance/