AWS Control Tower Account Factory for Terraform now re-applies customizations when accounts move between OUs

AWS Control Tower Account Factory for Terraform (AFT) now automatically re-applies account customizations when accounts move to different Organizational Units, eliminating manual re-application and configuration drift risks.

• Enable automatic re-application by setting aft_customization_triggers = ["account_move"] in AFT configuration
• Re-application workflow skips bootstrap and provisioning phases for faster execution
• Individual accounts can be excluded using account_skip_customization_triggers = "true"
• Additional improvements include custom Terraform Cloud workspace naming and tighter logging bucket access controls
• Improved scaling for large-scale AWS Enterprise Support enrollment

This capability helps organizations maintain compliance and security baselines tied to OU membership with reduced operational overhead.