AWS Control Tower Reviews

AWS Control Tower yields a substantial return on investment by simplifying multiple account management and ensuring compliance, reducing associated costs. It enhances security through Service Control Policies and AWS Config, safeguarding organizations and providing activity visibility. It significantly lowers human effort by enabling account-level changes, offering centralized governance across security, logging, and billing. Despite higher costs than on-premise data centers, AWS enhances business success and value, allowing a seamless environment reshaping for unified policies.

AWS Control Tower's pricing typically operates on a pay-as-you-go model, making it cost-effective, although costs can vary based on usage and environment specifics. Many find it affordable, but region-specific opinions, like in Brazil, rate it higher. It consolidates billing, potentially reducing costs. Small businesses may consider it expensive, yet its value in enhancing security and efficiency is appreciated. While some additional costs exist, such as for centralized logging, it generally provides flexible and reasonable pricing for enterprises.

• "I believe it's free of charge or comes at a very low cost. It's an additional feature. Even if there is a fee, it's minimal. AWS seems to assist customers in gaining a comprehensive view of their security setups within AWS. Using Control Tower is highly recommended, especially as your company grows and involves Active Directory, various departments, and different architectural aspects. It becomes more advisable to leverage Control Tower rather than managing these aspects manually, especially for larger organizations."
• "It is cost-effective and the associated cost is quite minimal."
• "The pricing structure is closely intertwined with the specifics of your environment and the billing strategy you employ."

AWS Control Tower is primarily used for providing specific configurations, account security, and governance. It facilitates centralized account management, access control, and compliance monitoring for multiple accounts. It automates account provisioning, integrates various services, and applies predefined security policies. The tool is essential for complex environments, ensuring well-structured accounts and reducing chances of misconfigurations and unauthorized access. It benefits organizations with innovation capabilities and supports transitions to cloud environments by building compliant and secure landing zones.

Experiences with AWS Control Tower's initial setup vary. Some find it straightforward due to automation and user-friendly features, while others face complexity, particularly with Active Directory integration. Guidance and default values aid beginners. Simpler setups involve organizing accounts in Organizational Units. Challenges include diverse Active Directory configurations and ensuring smooth transitions in existing environments. Some require advanced AWS knowledge, taking weeks for completion. Overall, the setup is efficient but may require advanced skills.

AWS Control Tower is rated favorably for scalability by users. While some mention regional limitations and complex requirements for broader coverage, others emphasize its ability to support numerous accounts and resources efficiently. Many find it adaptable and suitable for various organizational sizes and levels of cloud adoption. They appreciate its central management capacity, customization options, and seamless integration into daily operations, with plenty rating it eight out of ten for scalability.

Users have varied opinions on AWS Control Tower's stability, with assessments ranging from five to ten out of ten. Many find it generally stable, reliable, and regularly updated by AWS. Some mention occasional disruptions due to regional factors and integration challenges with existing accounts. While malware attacks and compliance issues are noted, AWS Control Tower is often praised for its comprehensive documentation and user-friendly interface streamlined for managing multiple AWS accounts.