AWS Control Tower is a service that will simplify your governance and compliance with your AWS accounts. It allows you to create accounts with ease, with automation and pre-built blueprints in just a few clicks. You are able to assign preventive guardrails that set limits on these accounts via the SCP in their respective OU. There is also the ability to utilize AWS config for detective guardrails to determine any compliance issues that may exist with your accounts that may need to be remediated. All of this can be monitored from an intuitive interactive dashboard to simplify account compliance.