AWS Control Tower Reviews

Name: AWS Control Tower
Brand: Amazon Web Services (AWS)
Rating: 4 (16 reviews)

4.3 out of 5

16 reviews
93% willing to recommend

What is AWS Control Tower?

AWS Control Tower offers the easiest way to set up and govern a new, secure, multi-account AWS environment. It establishes a landing zone that is based on best-practices blueprints, and enables governance using guardrails you can choose from a pre-packaged list.

Get the AWS Control Tower Buyer's Guide and find out what your peers are saying about AWS Control Tower, VMware Aria Automation, VMWare Tanzu CloudHealth and more!

AWS Control Tower is the #10 ranked solution in top Cloud Management solutions. PeerSpot users give AWS Control Tower an average rating of 8.6 out of 10. AWS Control Tower is most commonly compared to VMware Aria Automation: AWS Control Tower vs VMware Aria Automation. AWS Control Tower is popular among the large enterprise segment, accounting for 69% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a computer software company, accounting for 16% of all views.

Helped 814,649 peers since 2012

Featured reviews

AtemnkengNkeze

AWS Cloud Engineer/Cloud Architect at Landmark Technologies

You don't do anything when you set up these landing zones, such as the AWS Organization single sign-on. Everything is preconfigured, and you just have to do automation. Everything is established in the environment. If Control Tower could do this, it would be much better where all the security tools are already in it. I know AWS has its security tools, like Security Hub and Cloud Check, with minimal configuration. It would be much better if you set up the landing zone, which is the master account in the foundation of the environment, and all these tools are included. You should just get to go in and go, "Okay, I need this at this particular time." You should get to go in and do it. There should be more automation security tools in the Control Tower.

Read full review

Rasanpreet Singh

Senior Consultant at Infosys

It is undoubtedly a growing service, and it's evident that AWS is continuously working to improve it. However, some challenges do arise when it comes to migrating existing accounts that are not yet under Control Tower into the system. This process often involves creating specific roles manually, and it can be somewhat tedious and there isn't a readily available set of guidelines for this process. It requires some searching and digging through to find the necessary information. It is essential to clarify that this isn't necessarily a drawback of the service, but having a clear and concise set of predefined guidelines from AWS for moving existing accounts under AWS Control Tower would be highly beneficial as it would simplify the process and make it more user-friendly.

Read full review

Eldar Aronovich

Head of DevOps & Consultant at Pheno.AI

It has a limitation that only one account can be provisioned at a time, which may seem restrictive, but it doesn't have a significant impact on the overall work as it is a centralized task that is not done frequently. The ability to increase capacity and functionality aligns well with most user's needs. It is not a service that is used on-demand, but rather it becomes an integral part of the overall architecture and structure. Once implemented, it serves as the framework and foundation for the entire production environment and it is consistently used in the daily operations of the organization.

Read full review

AWS Control Tower mindshare

As of November 2024, the mindshare of AWS Control Tower in the Cloud Management category stands at 1.9%, up from 1.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Cloud Management

Key learnings from peers

Valuable Features

"AWS Control Tower is a tool specifically designed for multi-account management. It offers the advantage of highly granular management."
"The most intriguing feature is the automatic generation of user accounts. Leveraging Active Directory and global company settings, AWS Cloud Tower enables the creation of AWS user accounts based on job descriptions in Active Directory. This establishes a direct correlation between the user's name, job definition, and the corresponding rules applied to each account."
"AWS Control Tower helps to save a lot of work and manage multiple accounts."

Room for Improvement

"AWS should provide more resources, examples, and tutorials."
"There aren't any additional features that I feel are missing. However, it's worth noting that Control Tower seems to function as a layer utilizing standard AWS products in the background. Occasionally, the interface may appear less streamlined, with changes in layout based on the underlying products being used. While this doesn't impact functionality, having a more standardized user interface, irrespective of the background products, could enhance the user experience."
"The tool's setup is very technical. Its pricing can be cheaper."

Pricing

"I believe it's free of charge or comes at a very low cost. It's an additional feature. Even if there is a fee, it's minimal. AWS seems to assist customers in gaining a comprehensive view of their security setups within AWS. Using Control Tower is highly recommended, especially as your company grows and involves Active Directory, various departments, and different architectural aspects. It becomes more advisable to leverage Control Tower rather than managing these aspects manually, especially for larger organizations."
"It is cost-effective and the associated cost is quite minimal."
"The pricing structure is closely intertwined with the specifics of your environment and the billing strategy you employ."

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our AWS Control Tower Buyer's Guide for additional reliable information.