README.md

AWS Control Tower code examples for the SDK for Python

Overview

Shows how to use the AWS SDK for Python (Boto3) to work with AWS Control Tower.

AWS Control Tower enables you to enforce and manage governance rules for security, operations, and compliance at scale across all your organizations and accounts.

⚠ Important

• Running this code might result in charges to your AWS account. For more details, see AWS Pricing and Free Tier.
• Running the tests might result in charges to your AWS account.
• We recommend that you grant your code least privilege. At most, grant only the minimum permissions required to perform the task. For more information, see Grant least privilege.
• This code is not tested in every AWS Region. For more information, see AWS Regional Services.

Code examples

Prerequisites

For prerequisites, see the README in the python folder.

Install the packages required by these examples by running the following in a virtual environment:

python -m pip install -r requirements.txt

Before running the example, set up a landing zone in order to run the baseline and control management sections. Follow the instructions provided by the quick start guide.

Get started

• Hello AWS Control Tower (ListBaselines)

Basics

Code examples that show you how to perform the essential operations within a service.

• Learn the basics

Single actions

Code excerpts that show you how to call individual service functions.

• DisableBaseline
• DisableControl
• EnableBaseline
• EnableControl
• GetBaselineOperation
• GetControlOperation
• ListBaselines
• ListEnabledBaselines
• ListEnabledControls
• ListLandingZones
• ResetEnabledBaseline

Run the examples

Instructions

Hello AWS Control Tower

This example shows you how to get started using AWS Control Tower.

python hello/hello_controltower.py

Learn the basics

This example shows you how to do the following:

• List landing zones.
• List, enable, get, reset, and disable baselines.
• List, enable, get, and disable controls.

Start the example by running the following at a command prompt:

python scenario_controltower.py

Tests

⚠ Running tests might result in charges to your AWS account.

To find instructions for running these tests, see the README in the python folder.

Additional resources

• AWS Control Tower User Guide
• AWS Control Tower API Reference
• SDK for Python AWS Control Tower reference

---

Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.

SPDX-License-Identifier: Apache-2.0