Multi-Account Landing Zone
Design and deploy a full AWS landing zone using AWS Control Tower with custom Account Factory, service control policies for security guardrails, centralised CloudTrail and Config logging to a Log Archive account, VPC sharing via AWS RAM, and Transit Gateway for inter-VPC connectivity across 5 accounts. Document the full account vending machine process.