DevOps Articles

New for AWS Control Tower – Region Deny and Guardrails to Help You Meet Dat

https://aws.amazon.com/polly/ Many customers, such as those in highly regulated industries and the public sector, want to have control over where their data is stored and processed. Starting today, you can use https://aws.amazon.com/controltower/ to deploy data residency preventive and detective controls, referred to as https://docs.aws.amazon.com/controltower/latest/userguide/guardrails.html.

AWS Control Tower also offers guardrails to further control data residency in underlying AWS service options, for example, blocking https://aws.amazon.com/s3/ cross-region replication or blocking the creation of internet gateways. The AWS account used for managing AWS Control Tower is not restricted by the new Region deny settings.

Using Data Residency Guardrails in AWS Control Tower To use the new data residency guardrails, you need to have created a landing zone using AWS Control Tower.