AWS Control Tower automates the set-up of a baseline environment, or landing zone, that is a secure, well-architected multi-account AWS environment.
Announced at re:Invent 2018.
https://aws.amazon.com/controltower/
Uses AWS Config (expensive).
Note: AWS Config records and evaluates configurations of your AWS resources.