Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

Version 1 Next »

This page is a work in progress.

If the AWS Organization for which you are setting up Control Tower/Landing Zone contains legacy accounts that you wish to enroll to be managed by Control Tower, follow the steps below:

  1. Before deploying Customizations for Control Tower, manually create the AWSControlTowerExecution role by following the Step 2 in this guide. In a Control Tower-initialized account, this role is created by AWS automatically, and is required for Control Tower to manage any account. Legacy accounts do not have it.

  2. Add the legacy account configs to accounts.yaml in the landing-zone repo, with values for AccountName and AccountEmail that match current account details.

  • No labels