AWS Landing Zone #2: Control Tower Account Factory and baselining

How AWS Control Tower supports provisioning of new AWS accounts and how they can be further baselined automatically and kept up to date.