AWS Control Tower launches landing zone version selection

AWS Control Tower customers can now select from a set of versions when performing a landing zone update, reset, or upgrade operation. Starting with landing zone version 3.1 and above, customers can update or reset in-place their landing zone on their current version, or upgrade to a version of their choice. A landing zone is a well-architected, multi-account AWS environment based on security and compliance best practices. AWS Control Tower automates the setup of a new landing zone using best-practices blueprints for identity, federated access, logging, and account structure.

With landing zone version selection, customers have more flexibility to plan for version upgrades while they evaluate potential changes to their environment. Customers need not choose between resetting drift to stay in compliance, updating their landing zone configurations, or upgrading to the latest landing zone version. If customers are running landing zone version 3.1 or above, they can choose to stay on the current version, or upgrade to a newer version, when they update or reset their landing zone configurations.

For a full list of Regions where AWS Control Tower is available, see the AWS Region Table. To learn more, visit the AWS Control Tower homepage or see the AWS Control Tower User Guide.