AWS Control Tower endpoints and quotas - AWS General Reference

AWS Control Tower endpoints and quotas

To connect programmatically to an AWS service, you use an endpoint. AWS services offer the following endpoint types in some or all of the AWS Regions that the service supports: IPv4 endpoints, dual-stack endpoints, and FIPS endpoints. Some services provide global endpoints. For more information, see AWS service endpoints.

Service quotas, also referred to as limits, are the maximum number of service resources or operations for your AWS account. For more information, see AWS service quotas.

The following are the service endpoints and service quotas for this service.

Service Endpoints

AWS Control Tower has the following endpoints:

Region Name Region Endpoint Protocol
US East (Ohio) us-east-2

controltower.us-east-2.amazonaws.com

controltower-fips.us-east-2.amazonaws.com

HTTPS

HTTPS

US East (N. Virginia) us-east-1

controltower.us-east-1.amazonaws.com

controltower-fips.us-east-1.amazonaws.com

HTTPS

HTTPS

US West (N. California) us-west-1

controltower.us-west-1.amazonaws.com

controltower-fips.us-west-1.amazonaws.com

HTTPS

HTTPS

US West (Oregon) us-west-2

controltower.us-west-2.amazonaws.com

controltower-fips.us-west-2.amazonaws.com

HTTPS

HTTPS

Africa (Cape Town) af-south-1 controltower.af-south-1.amazonaws.com HTTPS
Asia Pacific (Hong Kong) ap-east-1 controltower.ap-east-1.amazonaws.com HTTPS
Asia Pacific (Hyderabad) ap-south-2 controltower.ap-south-2.amazonaws.com HTTPS
Asia Pacific (Jakarta) ap-southeast-3 controltower.ap-southeast-3.amazonaws.com HTTPS
Asia Pacific (Malaysia) ap-southeast-5 controltower.ap-southeast-5.amazonaws.com HTTPS
Asia Pacific (Melbourne) ap-southeast-4 controltower.ap-southeast-4.amazonaws.com HTTPS
Asia Pacific (Mumbai) ap-south-1 controltower.ap-south-1.amazonaws.com HTTPS
Asia Pacific (Osaka) ap-northeast-3 controltower.ap-northeast-3.amazonaws.com HTTPS
Asia Pacific (Seoul) ap-northeast-2 controltower.ap-northeast-2.amazonaws.com HTTPS
Asia Pacific (Singapore) ap-southeast-1 controltower.ap-southeast-1.amazonaws.com HTTPS
Asia Pacific (Sydney) ap-southeast-2 controltower.ap-southeast-2.amazonaws.com HTTPS
Asia Pacific (Tokyo) ap-northeast-1 controltower.ap-northeast-1.amazonaws.com HTTPS
Canada (Central) ca-central-1

controltower.ca-central-1.amazonaws.com

controltower-fips.ca-central-1.amazonaws.com

HTTPS

HTTPS

Canada West (Calgary) ca-west-1

controltower.ca-west-1.amazonaws.com

controltower-fips.ca-west-1.amazonaws.com

HTTPS

HTTPS

Europe (Frankfurt) eu-central-1 controltower.eu-central-1.amazonaws.com HTTPS
Europe (Ireland) eu-west-1 controltower.eu-west-1.amazonaws.com HTTPS
Europe (London) eu-west-2 controltower.eu-west-2.amazonaws.com HTTPS
Europe (Milan) eu-south-1 controltower.eu-south-1.amazonaws.com HTTPS
Europe (Paris) eu-west-3 controltower.eu-west-3.amazonaws.com HTTPS
Europe (Spain) eu-south-2 controltower.eu-south-2.amazonaws.com HTTPS
Europe (Stockholm) eu-north-1 controltower.eu-north-1.amazonaws.com HTTPS
Europe (Zurich) eu-central-2 controltower.eu-central-2.amazonaws.com HTTPS
Israel (Tel Aviv) il-central-1 controltower.il-central-1.amazonaws.com HTTPS
Middle East (Bahrain) me-south-1 controltower.me-south-1.amazonaws.com HTTPS
Middle East (UAE) me-central-1 controltower.me-central-1.amazonaws.com HTTPS
South America (São Paulo) sa-east-1 controltower.sa-east-1.amazonaws.com HTTPS
AWS GovCloud (US-East) us-gov-east-1

controltower.us-gov-east-1.amazonaws.com

controltower-fips.us-gov-east-1.amazonaws.com

HTTPS

HTTPS

AWS GovCloud (US-West) us-gov-west-1

controltower.us-gov-west-1.amazonaws.com

controltower-fips.us-gov-west-1.amazonaws.com

HTTPS

HTTPS

Service Quotas

AWS Control Tower has the following quotas.

Name Default Adjustable Description
Concurrent account operations quota Each supported Region: 5 Yes The maximum number of concurrent account operations that can be performed at the same time.
Concurrent organization units (OUs) operations quota Each supported Region: 1 No The maximum number of concurrent OU-related operations that can be performed at the same time.
Number of accounts in a single OU quota Each supported Region: 1,000 No The maximum number of AWS Control Tower managed accounts that can be present in one OU. If you add accounts beyond this limit, the OU registration process in AWS Control Tower cannot be performed. To learn more about the number of accounts per OU, review Regions and Stackset Limitations in the AWS Control Tower documentation.