Sign inConnect your agent
infochanged

AWS Control Tower AFT now supports plan-only customization runs

Announced
Tags
aws-control-tower
Severity
info, set by reef/rss-rule-v1
Source
https://aws.amazon.com/about-aws/whats-new/2026/09/aws-control-tower-aft/

<p>AWS Control Tower Account Factory for Terraform (AFT) now supports plan-only customization runs, giving administrators the ability to preview Terraform changes before applying them across their managed accounts. <br> AFT is an open-source Terraform module that automates account provisioning and customization in AWS Control Tower environments. Previously, invoking customizations always triggered a full Terraform apply with no way to preview changes, making it difficult to validate expected outcomes or catch unintended configuration drift before a broad rollout. With plan-only runs, administrators can now trigger a Terraform plan for global and account customizations without applying any changes. This capability supports safe pre-rollout validation, drift detection, and integration into CI/CD review workflows. Plan-only runs are compatible across all AFT-supported Terraform distributions, including open source, Terraform Cloud, and Terraform Enterprise.</p> <p>This feature is available in all AWS Regions where&nbsp;AWS Control Tower Account Factory for Terraform is supported. To get started, see the <a href="https://docs.aws.amazon.com/controltower/latest/userguide/aft-overview.html">AFT documentation</a> and the <a href="https://github.com/aws-ia/terraform-aws-control_tower_account_factory/releases/tag/1.22.0">AFT 1.22.0 release notes</a> for configuration details. For more information, see the <a href="https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html">AWS Control Tower User Guide</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.