AWS prescriptive-guidance documentation change
Summary
Updated landing zone definition, restructured content, and revised AWS Control Tower documentation
Security assessment
The changes emphasize security aspects of landing zones (identity management, data security) but do not address a specific security issue. The updates refine existing security documentation rather than introducing new vulnerabilities or fixes.
Diff
diff --git a/prescriptive-guidance/latest/strategy-migration/aws-landing-zone.md b/prescriptive-guidance/latest/strategy-migration/aws-landing-zone.md index 1e4375a1d..dc1aaddb5 100644 --- a//prescriptive-guidance/latest/strategy-migration/aws-landing-zone.md +++ b//prescriptive-guidance/latest/strategy-migration/aws-landing-zone.md @@ -3,3 +3 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Mobilize your organization to accelerate large-scale migrations](welcome.html) - -ObjectivesOutcomesHow-to guideRelated resources +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Mobilize your organization to accelerate large-scale migrations](introduction.html) @@ -9 +7 @@ ObjectivesOutcomesHow-to guideRelated resources -A landing zone is a well-architected, multi-account AWS environment that is a starting point from which you can deploy workloads and applications. It provides a baseline to get started with multi-account architecture, identity and access management, governance, data security, network design, and logging. +A landing zone is an orchestration framework for your foundational AWS environment. It provides a baseline to get started with multi-account architecture, identity and access management, governance, data security, network design, and logging. @@ -13 +11 @@ AWS has two options for creating your landing zone: a service-based landing zone -AWS created Control Tower to help you save time by automating the setup of a landing zone so you can run secure and scalable workloads. Control Tower is managed by AWS and uses best practices and guidelines to help you create your foundational environment. Control Tower uses integrated services like [AWS Service Catalog](https://aws.amazon.com/servicecatalog/) and [AWS Organizations](https://aws.amazon.com/organizations/) to provision accounts in your landing zone and manage access to those accounts. +AWS Control Tower helps you save time by automating the setup of a landing zone so you can run secure and scalable workloads. AWS Control Tower is managed by AWS and uses best practices and guidelines to help you create your foundational environment. AWS Control Tower uses integrated services such as [AWS Service Catalog](https://aws.amazon.com/servicecatalog/) and [AWS Organizations](https://aws.amazon.com/organizations/) to provision accounts in your landing zone and manage access to those accounts. @@ -15 +13 @@ AWS created Control Tower to help you save time by automating the setup of a lan -## Objectives +**Objectives** @@ -32 +30 @@ Create a landing zone with an initial configuration for the following: -## Outcomes +**Outcomes** @@ -39 +37 @@ Create a landing zone with an initial configuration for the following: -## How-to guide +**How-to guide** @@ -46 +44 @@ Create a landing zone with an initial configuration for the following: -## Related resources +**Related resources** @@ -54 +52 @@ Create a landing zone with an initial configuration for the following: - * [Architecting security & governance across your landing zone](https://www.youtube.com/watch?v=zVJnenaD3U8) + * [Architecting security & governance across your landing zone](https://www.youtube.com/watch?v=zVJnenaD3U8) (AWS re:Invent 2019 presentation)