AWS Control Tower
Read list landing zones, list baselines, get enabled control from ControlTower (SigV4).
OCNORA ships 4 typed AWS Control Tower operations. Each node has a schema-driven form, input and output tables beside its settings, and is pre-flighted by Workflow Health before your first real run.
Before you connect AWS Control Tower
- Authentication
- API key
- Credential
- {"access_key_id", "secret_access_key"}
- Connection test
- Available: the stored credential can be checked against the provider when you add it. This is not a record that a test was run or passed.
What you can do with AWS Control Tower
Operations, grouped by what they do to your data.
Read and search 3
Other operations 1
A sample AWS Control Tower workflow
- 1A core triggerStart the run from a chat, form, manual, schedule, webhook, workflow trigger — no AWS Control Tower trigger is needed.
- 2Get Enabled Controlcontroltower.get_enabled_controlRetrieves details about an enabled control. For usage examples, see the Controls Reference Guide .
- 3Write Actioncontroltower.callRun one of 14 write actions on ControlTower.
An outline built from this provider’s node contracts, not a recorded run. Each step’s output fields are available to the next in the field picker.
Every node below has a reference page: what it does, the connection it needs, its config fields with types, constraints and examples, and the shapes it emits.
Operations 4
- Write ActionRun one of 14 write actions on ControlTower.controltower.call
- Get Enabled ControlRetrieves details about an enabled control. For usage examples, see the Controls Reference Guide .controltower.get_enabled_control
- List BaselinesReturns a summary list of all available baselines. For usage examples, see the Amazon Web Services Control Tower User Guide .controltower.list_baselines
- List Landing ZonesReturns the landing zone ARN for the landing zone deployed in your managed account.controltower.list_landing_zones
AWS Control Tower questions
- How does OCNORA authenticate with AWS Control Tower?
- With a stored API key credential, shaped {"access_key_id", "secret_access_key"}. A connection test can check it when you add it.
- What can I automate with AWS Control Tower?
- 4 typed operations, each with a reference page listing its config fields and the shapes it emits.
- What if the AWS Control Tower operation I need is not listed?
- Where AWS Control Tower has an HTTP API, call it from the HTTP node with the same credential, or describe the step to the AI builder, which asks our team for a typed node when one is missing.
- Are there templates that use AWS Control Tower?
- Not yet. Start from a blank workflow, or describe the workflow to Build with AI.
- How are AWS Control Tower calls controlled?
- Every call and every run step is audited, runs count against the execution budget, and Workflow Health pre-flights the workflow when you save it.
See your first AWS Control Tower workflow run.
Book a technical demo. We add the connection, pick a template or describe the workflow to Build with AI, and Workflow Health checks it before it runs.