Microsoft Azure → Amazon Web Services
AWS equivalent of Azure landing zones (Cloud Adoption Framework)
The closest AWS equivalent of Azure landing zones (Cloud Adoption Framework) is AWS Control Tower.
About Azure landing zones (Cloud Adoption Framework)
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available Azure Blueprints (preview), an older way to package governance artifacts, retires January 31, 2027, in a phased retirement that began July 31, 2026. |
| What it is | Microsoft's reference architecture and deployable implementations (portal accelerator, Bicep, Terraform) for management groups, policies, identity, networking, and management at scale. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Landing zone setup and account vending | AWS Control Tower | Partial match |
Multi-account governance & guardrails(1)
Landing zone setup and account vending Partial match
AWS Control Tower maps to Azure landing zones from the Cloud Adoption Framework, deployed with the portal accelerator, Bicep, or Terraform, plus subscription vending modules. Azure Blueprints, an older option, retires January 31, 2027.
- Managed service vs. reference. Control Tower is a managed service that builds and maintains the landing zone, detects drift, and vends accounts through Account Factory. Azure landing zones are a reference architecture with deployable code that you own and update.
- Controls. Control Tower ships preventive (SCP), detective (Config), and proactive (CloudFormation hook) controls. Azure landing zones apply a curated set of Azure Policy assignments.