AWS Control Tower AFT Enables Auto-Reapplication of Account Customizations on OU Moves

AWS Control Tower Account Factory for Terraform now auto-reapplies customizations when accounts are reassigned between Organizational Units, reducing manual overhead.

By Oliver Grant · Editorial pseudonym · 2026-07-17 · 1 min read

AI-ASSISTED REPORTING · RETROSPECTIVE ARCHIVE

Retrospective edition: 2026-07-17. Source published: 2026-07-16. Added to this archive: 2026-11-03. This briefing was prepared later from the linked announcement; it was not published on this website on the historical edition date.

Previously requiring manual intervention, the new feature automatically triggers account-specific customization updates upon OU moves by setting a configuration parameter in AFT deployments. This streamlines operations and helps maintain compliance baselines tied to OU membership.

Additional improvements include customizable Terraform workspace naming, tighter logging bucket security, and enhanced scaling for Enterprise Support enrollments. These are AWS-provided capabilities aimed at improved governance automation with no third-party validation cited.

Source & further reading

AWS Control Tower Account Factory for Terraform now re-applies customizations when accounts move between OUs ↗

Source published 2026-07-16. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.