prerequisites

Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. SPDX-License-Identifier: CC-BY-SA-4.0

---

Prerequisites for AWS Control Tower solutions

1. Deploy the Customizations for AWS Control Tower Solution
2. Required steps to deploy resources into the AWS Control Tower Management account (e.g. Management Account)
   1. Create an Organizational Unit (e.g. Management) for the Management account
      1. Review the Manage Accounts Through AWS Organizations documentation
   2. Move the Management account into the new Organizational Unit
   3. Create the AWSControlTowerExecution IAM role in the Management account
      1. Use the prereq-controltower-execution-role.yaml template to create a CloudFormation stack in the Management account.
3. Create an S3 bucket for the Lambda source code
   1. Use the prereq-lambda-s3-bucket.yaml template to create a CloudFormation StackSet in the Management account for each region that will deploy custom resources.
4. Package the Lambda code and required libraries (e.g. solution/lambda/src) into a zip file and upload it to the Lambda source S3 bucket.
   1. Use the packaging script to download the required libraries, create a zip file, and upload it to a provided S3 bucket. Usage details are at the top of the script.
5. (Optional) Create SSM parameters for the AWS Account IDs and AWS Organizations ID
   1. Use the prereq-ssm-account-params.yaml template to create a CloudFormation stack in the Management account.