Core concept

Best-practice baseline: log archive account, audit account, guardrails, Identity Center for SSO.

Advertisement

How it works

Opinionated. Some customizations awkward. Custom Landing Zone for regulated industries needing specific controls.

Advertisement

Trade-offs + gotchas

New AWS enterprise deployments. Startups scaling to multi-account. Migration from single account.