Which solution will meet these requirements?
Use an AWS Config conformance pack to deploy the account-part-of-organizations AWS Config rule and to automatically remediate any noncompliant accounts.
Create an AWS Lambda function to create a ticket for AWS Support to add the account to the Enterprise Support plan. Grant the Lambda function the support:ResolveCase permission.
Add an additional value to the control_tower_parameters input to set the AWSEnterpriseSupport parameter as the organization’s management account number.
Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input configuration. Redeploy AFT and apply the changes.
Explanations:
AWS Config conformance packs are used for compliance checking and remediation but do not control the AWS Support plan for new accounts.
While creating a Lambda function to create a ticket for AWS Support is possible, it does not provide an automatic way to assign the Enterprise Support plan during account creation.
Thecontrol_tower_parametersinput is used to customize AWS Control Tower configurations, but it does not control the AWS Support plan for new accounts.
Theaft_feature_enterprise_supportflag in the AFT configuration specifically enables the Enterprise Support plan for newly provisioned accounts, ensuring the requirement is met.
As far as I can tell, the answer is:
Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input configuration. Redeploy AFT and apply the changes.
I rate that the answer is:
Set the aft_feature_enterprise_support feature flag to True in the AFT deployment input configuration. Redeploy AFT and apply the changes.