AWSControlTowerBP-BASELINE-CONFIG-MASTER is deployed as a Stack in the management account. In https://github.com/awsdocs/aws-control-tower-guide/blob/main/doc_source/how-control-tower-works.md, the documentation incorrectly lists it as being deployed in the StackSets section.

Since the below Control Tower documentation page talks about multi-account strategy, it might be a good idea to refer to the whitepaper published regarding Organizing multiple accounts using AWS Organizations.

Control Tower documentation page

https://docs.aws.amazon.com/controltower/latest/userguide/aws-multi-account-landing-zone.html#guidelines-for-multi-account-setup

Whitepaper

https://docs.aws.amazon.com/whitepapers/latest/organizing-your-aws-environment/benefits-of-using-multiple-aws-accounts.html

Hi,

a PDF format is fine but can you also provide a Kindle or epub e-book format for the documentation? Maybe put it in the Amazon Kindle store, too?

When navigating to:
https://docs.aws.amazon.com/controltower/latest/userguide/cfct-overview.html

Pressing Edit this page on GitHub we get redirected to > https://github.com/awsdocs/aws-control-tower-guide/tree/main/doc_source/cfct-overview.md

That page however does not exist as we get 404.

This seems to be also an issue for some other pages under Customize your AWS Control Tower landing zone category.

Hi, last week I tried to activate Control Tower on an existing organization.
I followed all the checks in the prerequisites list, but 10 minutes after the configuration procedure start I got an error regarding STS endpoint activation for specific regions.
I suggest to add this requirement in the prerequisites checklist, because I didn't find any articles about this requirement, just to avoid this annoying issue.

Regard, Daniele

https://docs.aws.amazon.com/controltower/latest/userguide/disaster-recovery-resiliency.html lists 5 regions where Control Tower is available. I believe that this list is out of date.

After enabling Control Tower it appears that StackSet "AWSControlTowerExecutionRole" is created and it is used to deploy AWSControlTowerExecutionRole to child accounts but I can't see that it's mentioned anywhere in the documentation. Can you please add it to the documentation? I'm not sure if its something new in 2.8 version of Control Tower.