AWS Control Tower's Account Factory for Terraform now supports automatic re-application of account customizations when accounts move between Organizational Units. Previously, this process required manual intervention to prevent configuration drift, adding operational overhead. Enabling the new feature skips bootstrap phases, running only global and account-level customizations for faster execution.
- Set aft_customization_triggers = ["account_move"] to enable auto-reapplication.
- Eliminates manual triggers and reduces configuration drift risk during OU changes.
- Workflow skips bootstrap/provisioning, executing only global and account-level customizations.
- Ensures accounts immediately align with OU-specific configurations upon movement.