Level-Up Your Landing Zone: Upgrading AWS Control Tower to v3.3 & Using the New Enabled Controls API for Continuous Gap Analysis

The AWS Control Tower team has been shipping features at a blistering pace this year. Two stand-outs landed in May 2025:

  • Centralized “Enabled Controls” view in the console, a one-stop dashboard that lists every preventive, detective, and proactive control you’ve switched on across all OUs and accounts. Amazon Web Services, Inc.
  • 233 new AWS Config-backed controls plus automatic baseline-drift reporting to surface deviations from best practice as they happen. docs.aws.amazon.com

Read More