Maintain Landing Zone Compliance Documentation
Specification & Description
Maintain comprehensive documentation of the Landing Zone configuration, policies, and procedures in a centralized repository (e.g., Confluence, Git) and automate evidence collection via AWS Audit Manager.
Technical Specifications
Detailed documentation is critical for compliance audits, operational continuity, and disaster recovery. It must cover the OU structure, SCP/RCP catalog, network architecture, and security baselines. Integrating this with AWS Audit Manager allows for automated mapping of these configurations to compliance frameworks, reducing manual audit effort.
Security Rationale
Without a central 'Source of Truth' and automated evidence collection, proving compliance is resource-intensive and error-prone. Documentation ensures institutional knowledge is preserved and audits are streamlined.
Operational & Implementation Notes
AWS Audit Manager is transitioning to maintenance mode. From April 30th 2026, customers will no longer be able to set up the service in new accounts. Existing customers can continue to use the service in previously enabled accounts and regions, including creating new Assessments and adding organizational accounts to existing management account setups. However, no new regions, organizations, or major features/frameworks will be supported. Documentation in Confluence/Git remains the primary non-service-dependent source of truth.