SAP-C02 - Design Solutions for Organizational Complexity - Section 1.4

Design a multi-account environment with AWS Organizations and AWS Control Tower, using service control policies, organisational units and centralised logging for governance.

Design a multi-account landing zone using AWS Organizations and AWS Control Tower, applying service control policies at the organisational unit level to enforce guardrails and aggregating logs to a centralised logging account. Recognise how account vending, mandatory controls, and detective controls together provide governance at scale.

AWS OrganizationsAWS Control TowerService control policiesCentralised logging

More in this domain

Back to all Design Solutions for Organizational Complexity objectives, or the SAP-C02 cert hub.

Examworthy is not affiliated with or endorsed by Amazon Web Services. Original, blueprint-aligned practice material only.