Service control policies (SCP) realignment and consolidation to meet and align according to the customer requirements, new OU structure, and AWS Control Tower.

AWS Organizational Unit (OU) restructuring from a nested OU structure to a flat OU structure supported by AWS Control Tower.Unavailability of AWS Control Tower and some of the core dependent services in the AWS Cape Town Region at the time of project initiation.Transition to AWS Control Tower by migrating all accounts governed under the AWS Landing Zone solution without any business impact.īelow are some of the key challenges encountered during this engagement:.Reduced risk and faster AWS adoption of accounts that are scalable, secure, and governed according to customer requirements.Secure, multi-account AWS environment across the AWS Ireland and Cape Town Regions with automated security, governance, and compliance.Key outcomes expected from this engagement were: They engaged Tech Mahindra to review their existing solution and to design and implement a new landing zone which could manage and govern environments in the AWS Ireland and AWS Cape Town Regions.Ī strategic collaboration between the customer, AWS, and Tech Mahindra was established to assess their current implementation, set up a new Control Tower environment, and transition from AWS Landing Zone to AWS Control Tower. The customer had their landing zone built based on the AWS Landing Zone solution and was primarily focused on the AWS Ireland Region. The customer we’ll reference in this post is a large African telecommunication and network services provider that offers voice, messaging, data, and converged services to millions of users in that geography. Tech Mahindra is also a member of the AWS Managed Service Provider (MSP) and AWS Well-Architected Partner Programs. Tech Mahindra is an AWS Advanced Consulting Partner with the Migration Competency that specializes in digital transformation, consulting, and re-engineering solutions. This post describes a strategic collaboration between Tech Mahindra, AWS, and a customer to transition from AWS Landing Zone to the AWS Control Tower environment.

Many customers currently using the self-managed AWS Landing Zone solution are looking to transition to AWS Control Tower to gain additional benefits. Success of the AWS Landing Zone solution and continuous requests from customers led to the launch of AWS Control Tower, a managed service to help customers easily set up and govern a secure, multi-account AWS environment.

It creates a baseline environment to get started with a multi-account architecture, identity and access management, governance, security, network design, and logging. This was a self-managed AWS solution which automates the setup of an environment for running secure and scalable workloads. Cloud Architect – Tech Mahindraīy Santhana Krishna K, Principal Cloud Architect – Tech Mahindraīy Amit Kumar and Shonil Kulkarni, Partner Solutions Architects – AWSĪmazon Web Services (AWS) provides a secure cloud environment for customers to run their workloads and enable them to experiment, innovate, and scale more quickly.Īt Tech Mahindra, setting up a secure, scalable, and resilient multi-account environment is one of the most common requests from customers.ĪWS Landing Zone initially launched as a solution to help customers more quickly set up a secure, multi-account AWS environment based on AWS best practices. Cloud Architect – Tech Mahindraīy Thooyavan Arumugam, Sr.

Seamless transition