1 Answer
- Newest
- Most votes
- Most comments
1
Currently its not possible to have multiple control tower accounts under one org, there can be only one of in the management account. I would take below steps:
- So if you are looking for unifying all accounts under one management, you can either create a new Control tower account or promote one of the existing account.
- enroll your existing accounts - https://docs.aws.amazon.com/controltower/latest/userguide/enroll-account.html
- decommission unused management account - https://docs.aws.amazon.com/controltower/latest/userguide/how-to-decommission.html
Next part of unifying Networking - This will be little tricky if you have production workload running. see this - https://docs.aws.amazon.com/vpc/latest/tgw/tgw-best-design-practices.html Also have a look at AWS IPAM for managing your VPC and IPs- https://aws.amazon.com/blogs/mt/using-amazon-ipam-to-enhance-aws-control-tower-governance-for-networking-resources/
Thanks
answered 7 months ago
Relevant content
- Accepted Answerasked 2 years ago
- asked a year ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago
- AWS OFFICIALUpdated 2 years ago
- AWS OFFICIALUpdated a year ago