AWS Control Tower Account Factory for Terraform (AFT)
Provision and customize accounts through Terraform using a GitOps model.
Overview
AWS Control Tower Account Factory for Terraform (AFT) is a Terraform module maintained by AWS that allows organizations to provision and customize AWS accounts through a GitOps-style workflow. It sets up a deployment pipeline that enables you to use Terraform to automate the creation of fully functional accounts that comply with your organization's security guidelines, bridging the gap between AWS's governance services and the popular Infrastructure as Code tool.
✨ Key Features
- GitOps-based account provisioning
- Terraform-native workflow for account creation and customization
- Automated pipeline for consistent deployments
- Support for custom Terraform modules
- Integration with AWS Control Tower governance
- Works with Terraform open source, Terraform Enterprise, and Terraform Cloud
🎯 Key Differentiators
- Native Terraform integration for account provisioning
- GitOps workflow for managing account configurations
- Maintained and supported by AWS
Unique Value: Enables a fully automated, GitOps-driven, and Terraform-native approach to provisioning and customizing AWS accounts within a governed Control Tower environment.
🎯 Use Cases (4)
✅ Best For
- Enterprise-scale account vending for DevOps teams using Terraform.
💡 Check With Vendor
Verify these considerations match your specific requirements:
- Teams not using Terraform
- Organizations that only need simple account creation via the AWS console
🏆 Alternatives
Provides a more robust and scalable IaC approach compared to using the AWS Service Catalog console directly, and is more standardized than custom scripting.
💻 Platforms
🔌 Integrations
🛟 Support Options
- ✓ Email Support
- ✓ Live Chat
- ✓ Phone Support
- ✓ Dedicated Support (AWS Business Support or Enterprise Support tier)
🔒 Compliance & Security
💰 Pricing
Free tier: AFT is offered at no additional charge.
🔄 Similar Tools in AWS Landing Zone
AWS Control Tower
Automates the setup of a landing zone in AWS, based on best practices....
Landing Zone Accelerator on AWS (LZA)
An open-source, IaC solution to deploy a customizable, secure, and compliant AWS landing zone....
Superwerker
An open-source solution that quickly sets up a secure AWS environment based on best practices....
Kion
A comprehensive platform for multi-cloud governance, financial management, and automation....
Turbot
A platform for policy-based control and automatic remediation of enterprise clouds....
AWS Organizations
A foundational AWS service for managing multiple AWS accounts....