|
5 | 5 | description_assets: "/assets/img/landing-zone-features/[email protected]" |
6 | 6 | description_assets_mobile: "/assets/img/landing-zone-features/[email protected]" |
7 | 7 |
|
8 | | -- title: Quickly create new AWS accounts |
9 | | - description: Gruntwork Landing Zone includes an opinionated way to create a new AWS account as part of your AWS Organization using just three lines of code, plus a Terraform apply. |
| 8 | +- title: Quickly create new AWS accounts with Terraform |
| 9 | + description: "Gruntwork Landing Zone includes an opinionated way to create a new AWS account as part of your AWS Organization using just a few lines of Terraform code:" |
10 | 10 | url: "/assets/img/landing-zone-features/[email protected]" |
11 | 11 | precode: | |
12 | 12 | <figure><figcaption>Variables.tf</figcaption> |
|
29 | 29 | <figure> |
30 | 30 |
|
31 | 31 |
|
32 | | -- title: Apply a best-practices security baseline to each AWS account |
33 | | - description: We define security baselines for the "root", "security", and "app" AWS accounts that include best-practices configurations for AWS CloudTrail, AWS Config, AWS Config rules, AWS IAM user password policies, cross-account access, Amazon GuardDuty, and more. |
34 | | - url: "/assets/img/landing-zone-features/[email protected]" |
| 32 | +- title: 'Alternatively, create AWS accounts with Control Tower (Gruntwork Enterprise only) <label style=" |
| 33 | + display: inline-flex; |
| 34 | + align-items: center; |
| 35 | + position: relative; |
| 36 | + top: -5px; |
| 37 | + "> |
| 38 | + <div style=" |
| 39 | + background: linear-gradient( |
| 40 | + 101.84deg, |
| 41 | + #fe3162 2.31%, |
| 42 | + #ff4f47 98.56% |
| 43 | + ); |
| 44 | + margin-left: 5px; |
| 45 | + " class="label-beta"> |
| 46 | + BETA |
| 47 | + </div> |
| 48 | + </label>' |
| 49 | + description: | |
| 50 | + <p>Alternatively, Gruntwork Enterprise customers can use the Gruntwork Landing Zone Control Tower Integration to create accounts using AWS Control Tower:</p> |
| 51 | + <img src="/assets/img/landing-zone-features/landing-zone-dashboard-aws.png"/> |
| 52 | + <p>Gruntwork Landing Zone will automatically apply a best-practices security baseline to every new account using Terraform, as described in the next section.</p> |
| 53 | + url: "/assets/img/landing-zone-features/[email protected]" |
35 | 54 |
|
36 | | -- title: 100% Terraform-native |
37 | | - description: Manage your accounts and security baselines as Terraform code. Update to the latest Gruntwork Landing Zone baselines or make AWS Organization changes such as setting AWS Config Rules with simple changes to Terraform code. |
| 55 | +- title: Apply a best-practices security baseline to each AWS account |
| 56 | + description: Automatically apply security baselines, defined in Terraform, to all your accounts. Whether you create the accounts using Terraform or Control Tower, this ensures that all of your accounts are properly configured with AWS CloudTrail, AWS Config, AWS Config rules, Amazon GuardDuty, Macie, IAM roles, IAM Access Analyzer, VPCs, and more. |
38 | 57 | url: "/assets/img/landing-zone-features/[email protected]" |
39 | 58 |
|
40 | | -- title: Customize your AWS account baseline |
41 | | - description: Extend or customize your AWS account baselines by adding or removing any set of services you want directly in the Terraform code. |
| 59 | +- title: Customize your AWS account baselines |
| 60 | + description: You get 100% of the Terraform code for the security baselines, so you can extend or customize them any way you want, ensuring that every one of your accounts meets your company’s requirements. |
42 | 61 | url: "/assets/img/landing-zone-features/[email protected]" |
43 | 62 |
|
44 | | -- title: Automate account creation |
45 | | - description: Because Gruntwork Landing Zone is 100% Terraform-native, you can create new accounts as part of any pipeline that runs Terraform code. For a production-ready example, see Gruntwork Pipelines. |
46 | | - url: "/assets/img/landing-zone-features/[email protected]" |
47 | | - |
48 | 63 | - title: Keep your code up to date automatically |
49 | | - description: With <a href="/patcher">Patcher</a>, streamline your account baseline updates, even when they involve breaking changes. |
| 64 | + description: With <a href="/patcher">Patcher</a>, keep your account baseline up to date automatically with the latest best practices, compliance requirements, AWS releases, Terraform releases, etc—even when those releases involve breaking changes. |
50 | 65 | url: "/assets/img/landing-zone-features/[email protected]" |
51 | 66 |
|
52 | | -- title: Available off the shelf |
53 | | - description: Gruntwork Landing Zone is pre-written, commercially supported, production-grade code that is available right now. No consulting engagement needed. |
| 67 | +- title: "Control Tower Integration: the best of both worlds (Enterprise only)" |
| 68 | + description: | |
| 69 | + <p>With the Gruntwork Landing Zone Control Tower Integration, you get the best of both worlds.</p> |
| 70 | + <p><strong>Use Control Tower to:</strong></p> |
| 71 | + <ul> |
| 72 | + <li>See all your accounts and OUs</li> |
| 73 | + <li>Create new accounts</li> |
| 74 | + <li>Ensure those accounts have CloudTrail, AWS Config, and AWS Identity Center (SSO) setup</li> |
| 75 | + <li>Apply controls and guard rails (SCPs, AWS Config Rules) to your accounts</li> |
| 76 | + <li>See which accounts and resources are non-compliant with your controls and guard rails</li> |
| 77 | + </ul> |
| 78 | + <p><strong>Use Terraform modules to:</strong></p> |
| 79 | + <ul> |
| 80 | + <li>Fill in features not supported by Control Tower: e.g., GuardDuty, Macie, IAM Access Analyzer, etc.</li> |
| 81 | + <li>Customize the baseline applied to each account by updating the Terraform modules.</li> |
| 82 | + <li>Integrate accounts created with Control Tower with your Terraform-managed infrastructure.</li> |
| 83 | + <li>Stay up to date automatically using Patcher.</li> |
| 84 | + </ul> |
54 | 85 | url: "/assets/img/landing-zone-features/[email protected]" |
0 commit comments