Account Factory for Terraform (AFT), an open-source module automating account provisioning in AWS Control Tower, enhanced its workflow by supporting plan-only runs. This lets administrators preview infrastructure changes and validate expected outcomes before broad rollout, reducing risks from unintended configuration drift.
Plan-only runs facilitate integration into CI/CD pipelines and support drift detection by producing Terraform plans without triggering actual apply operations. This feature works with various Terraform distributions including open source and enterprise versions, and is available in all AWS Regions where AFT operates.
Source & further reading
AWS Control Tower AFT now supports plan-only customization runs ↗Source published 2026-10-05. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.