Regions
The Data Landing Zone supports deployment across multiple AWS regions. When configuring regions, you must define:
- Global Region: Also referred to as the “home region” by Control Tower, this is where Control Tower is deployed. It hosts non-regional resources such as IAM. The global region is deployed first, as other regions may depend on resources created there. Note: the global region should not and cannot be changed after deployment.
- Additional Regions: One or more regions where you wish to manage and govern resources.
Below is an example of defining a global region and one additional region.
Adding a region
- Add the region to Control Tower and wait for the setup/deployment to complete.
- Update the Data Landing Zone configuration to include the new region.
- Run the
bootstrapAll
script or manually bootstrap the account using the AWS CDK. Refer to Scripts and Commands for detailed instructions.