Cloud Control

• 1: Overview
• 2: How-to guides
• 2.1: Managing Guardrails
• 2.2: Managing Organizations
• 2.3: Managing Accounts
• 3: API Reference
• 4: CLI Reference
• 5: Release Note

1 - Overview

Service Overview

Cloud Control service is a managed service that supports building, operating, and managing a multi‑account environment easily and securely on the Samsung Cloud Platform.
The Cloud Control service automates an organization’s cloud governance (security, compliance, standardization, etc.) and provides consistent, centralized account and resource management based on Samsung Cloud Platform best practices.

Features

The Cloud Control service offers the following advantages.

• Landing Zone (Landing Zone) Automatic Provisioning: Automatically configures essential infrastructure such as Samsung Cloud Platform accounts, organizational units (OU), guardrails, logging, etc. * In a standardized environment, you can create new accounts and invite existing accounts.
• Centralized Governance and Policy Enforcement: Automatically apply security, compliance, and operational policies (guardrails) across the entire organization. * Provides policy violation detection and monitoring capabilities.
• Multi-Region and Scalability: You can apply the same governance and policies across multiple Samsung Cloud Platform regions.

Provided features

The Cloud Control service provides the following features.

• Automated Landing Zone (Landing Zone) Setup: Security, logging, and account structures based on Samsung Cloud Platform best practices are automatically configured.
• Guardrail applied
  • Preventive guardrail: block the creation of resources that violate policy
  • Detective Guardrail: Automatically detect and alert on policy‑violating resources
  • Integrate with ACP of Samsung Cloud Platform Organization, Samsung Cloud Platform Config Inspection, etc.
• Dashboard Provision: You can visually monitor the accounts, OUs, guardrail implementation status, and compliance status of the entire organization.
• Centralized logging and auditing
  • Provide centralized log storage and audit accounts for all accounts through Logging&Audit, Object Storage, Config Inspection, etc.
• ID and Permission Management Integration: By integrating with Samsung Cloud Platform ID Center, you can manage account-specific access control and permission groups.
• Monitoring and Notification (Notification) Feature: Provides real-time alerts for policy violations, Cloud Control configuration changes, etc.

Components

Landing Zone (Landing Zone)

The basic architecture of a standardized Samsung Cloud Platform environment, including governance, security, networking, and logging, is as follows.

Guardrails

The guardrails that automatically apply policy violation detection and prevention (detection/prevention type) rules and security/compliance standards are as follows.

Baseline (Baseline)

The essential resources and configuration sets, such as security, logging, and networking, that are automatically deployed per account are as follows.

Provision status by region

The Cloud Control service is available in the environments below.

Preceding Service

This is a list of services that must be pre‑configured before creating the service. Please refer to the guide provided for each service and prepare in advance.

2 - How-to guides

Using Cloud Control

The user must first create a landing zone to use the Cloud Control service. When a landing zone is created, you can use the management features of Cloud Control.

Create Landing Zone

To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone.

Follow these steps to create a landing zone.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.

2. Click the Create Landing Zone button on the Service Home page. 2. Go to the Create Landing Zone page.

3. After setting the configuration items in the Rate Review and Organizational Unit Configuration area, click the Next button.

   Category	required status	Detailed description
   Home region	-	Home region of Cloud Control Cloud Control designates the default region as the home region and cannot be changed All regions except the default region are managed by Cloud Control
   Basic organizational unit	Required	Enter the primary organizational unit within the landing zone Case-sensitive English letters, up to 128 characters The primary organizational unit includes shared Accounts (Log Account, Audit Account) Security: Name of the primary organizational unit for the shared Account Can be modified after the landing zone is created
   Additional organizational unit	Required	Enter additional organizational unit within the landing zone Case-sensitive English letters, enter up to 128 characters Can be added after the landing zone is created

   Table. Landing zone creation - cost review and organizational unit configuration items

4. After setting the configuration items in the Shared Account Configuration area, click the Next button.

   Category	Required status	Detailed description
   Management Account	-	The Management Account name is displayed and cannot be edited.
   Log Account	Required	Enter Log Account information Account name: Korean, English, numbers, spaces, special characters(+=-_@[](),.) using them, enter within 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email confirmation: Re-enter the email address entered in Email
   Audit Account	Required	Enter Log Account information Account name: Korean characters, English letters, numbers, spaces, and special characters (+=-_@[](),.) using 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email Confirmation: Re-enter the email address entered in Email The same email as Log Account cannot be used

   Table. Landing Zone Creation - Shared Account Configuration Items

   Reference

   • Log Account is a repository of logs for API activity and resource configurations collected from all Accounts. * Log Account cannot be changed.
   • The Audit Account is a restricted account, and the security and compliance team can obtain access to all accounts within the organization through the Audit Account.

5. After setting the configuration items in the Additional Configuration area, click the Next button.

   Category	Required status	Detailed description
   Account access configuration	Required	Select a method to manage access to the Account Account access via ID Center Configure users who perform specific tasks in the Account by creating pre-configured groups and permission sets Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Selectable only when using ID Center’s own directory Self-managed Account access Cloud Control does not create directory groups or permission sets for the landing zone Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Manage access to the Account via ID Center or other Account access methods
   Trail configuration	-	Proceed with automatic configuration
   Detection guardrail	Selection	Select whether to enable the detective guardrail When the detective guardrail is enabled, it applies only to the default organizational unit Even after creating a landing zone, you can change settings on the Landing Zone Settings page For more information about the detective guardrail, see 탐지 가드레일

   Table. Create Landing Zone - Additional Configuration Items

6. In the Check Input Information area, after reviewing the landing zone configuration information and Service Permissions, check the agreement regarding permissions and guidelines.

7. Click the Create button. 5. A popup window announcing the creation of a landing zone opens.

8. After checking the information about creating a landing zone, click the Confirm button. 6. The landing zone creation request has been completed.

   • Creating a landing zone takes some time, and a notification is sent when the task is completed.
   • Once the landing zone creation is complete, you can view the full menu of Cloud Control and the organization status on the Service Home page.

Check detailed landing zone information

Landing Zone Settings page allows you to view detailed information about the landing zone.

To view detailed information about the landing zone, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. Service Home on the page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.

Delete Landing Zone

If you fail to create a landing zone or do not use it, you can delete the landing zone.

To delete a landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Delete Landing Zone button. 3. Delete Landing Zone popup opens.
4. Landing Zone Deletion After entering the Cloud Contorl ID displayed in the popup into the deletion confirmation area, click the Confirm button. 4. The landing zone deletion request has been completed.
   • While deleting a landing zone, an explanation regarding the landing zone deletion process is displayed on the Service Home page.

Managing organizational units and Accounts

You can view the list of organizational units and accounts, register them in Cloud Control, and manage them.

To view and manage organizational units and the Account list, follow the steps below.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
3. Select the view mode at the top right of the Organization Unit and Account Management page.
   • Click the View Hierarchy button to view and manage organizational units and Accounts in a hierarchical structure.

     Category	Detailed description
     Create a sub-organization unit	Add a new organizational unit under the selected organizational unit Enabled only when a single organizational unit is selected in the hierarchy Refer to 조직 단위 생성하기 for more details
     More	You can manage organization units or register a new Account Organization Unit: Deletion/registration/re-registration of organization units, and application/removal of detective guardrails possible For detailed information on managing organization units, see 조직 단위 관리하기 For detailed information on detective guardrails, see 탐지 가드레일 Account: Account registration/deregistration possible For detailed information on Account registration and deregistration, see Account 관리하기
     Organization Unit/Account Name	Display the names of organizational units and Accounts in a measurement-structure format +, - buttons can be clicked to expand or collapse the hierarchy Clicking an organizational unit/Account name navigates to the detail page
     ID/email	Organization units display the ID, and Account displays the ID and email
     status	Cloud Control registration status for organization units or Accounts Registered, Not registered, Registering, Registration failed No status displayed when Root
     Register organization unit	Cloud Control registration status of sub‑organization units Number of registered organization units / total organization units displayed
     Register Account	Sub Account’s Cloud Control registration status registered Account count / total Account count displayed
     Detection guardrail	Detection guardrail application status for organizational units or sub-units

     Table. Hierarchy view items
   • View Account List: You can view and manage the list of Accounts that constitute Cloud Control.

     Category	Detailed description
     Account registration	Register the selected Account from the Account list to Cloud Control When you select an Account in the Account list that is Unregistered, Registration Failed status, it becomes active For detailed information about Account registration, see Account 등록하기
     More > Unregister Account	Deregister the selected Account from the Account list When you select an Account in the Account list that is in registered, registration failed status, it becomes active Shared Accounts cannot be deregistered For more details on Account deregistration, see Account 등록 해제하기
     Account name	Account name
     Account ID	Account ID
     email	Account user email
     status	Cloud Control registration status of an organization unit or Account Registered, Not registered, Registering, Registration failed When Root, no status is displayed

     Table. Account list view item
   • Create Account button click allows you to create a new Account. * For more details, refer to Account 생성하기.

Check organization and Account detailed information

You can view and edit the detailed information of organizational units and Account. To view detailed information of the organization unit and Account, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
3. Click the View Hierarchy button on the Organization Unit and Account Management page.
4. Click the resource name in the hierarchical list to view its details. 4. Navigate to the detailed page of the resource.
   • Root: Root Details page. * For detailed information, see Root 상세 정보.
   • Organization unit name: Organization unit details Navigate to the page. * For detailed information, see 조직 단위 상세 정보.
   • Account name: Go to the Account details page. * For more details, see the Account 상세 정보.

Root detailed information

On the Root Details page, you can view and manage the detailed information of the organization Root and the list of subordinate Accounts. The Root Details page consists of Basic Information, Sub Account tabs.

Basic Information

You can view basic information about the Root organization and the number of organizational units and Accounts registered in Cloud Control.

Sub Account

You can view and manage the list of Accounts under the Root and the registration status of Cloud Control.

Organization Unit Detailed Information

On the Organization Unit Details page, you can view and manage the detailed information of the organization unit, its subordinate Accounts, and the applied preventive guardrails and detection guardrails. Organization Unit Details page consists of Basic Information, Sub Account, Preventive Guardrails, Detection Guardrails tabs.

Basic Information

You can view basic and detailed information about the organizational unit.

Sub Account

You can view and manage the list of subordinate Accounts for an organizational unit.

Preventive Guardrail

You can view and manage the list of preventive guardrails applied at the organizational level.

Detection Guardrail

You can view and manage the diagnostic results of detection guardrails applied at the organizational level.

Check detailed information of Account

Account Details page allows you to view the account’s detailed information and the list of applied preventive guardrails. Account Details page consists of Basic Information, Preventive Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Preventive Guardrail

You can view the list of preventive guardrails applied to the Account.

Check Access Portal Connection Information

User and Access page allows you to view the Access Portal connection URL and connection methods (password, SSO, MFA).

To check the Access Portal connection information, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Navigate to the User and Access page.
3. Check the information in the User and Access page’s Integrated Access Management area.

Check user credential information

User and Access page lets you view the user credential source type and the ID Center ID.

To verify user credential information, follow the steps below.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Navigate to the User and Access page.
3. Check the information in the User Credential Management area of the User and Access page.

2.1 - Managing Guardrails

The guardrails that are automatically applied for policy violation detection and prevention (detect/prevent type) rules, and security/compliance standards are as follows.

Preventive Guardrail

You can apply preventive guardrails to proactively block policy violations from occurring.

Applying preventive guardrails

It can be applied to preventive guardrails at the organizational level. To apply preventive guardrails at the organizational level, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.

3. From the Preventive Guardrail List, select the preventive guardrails to apply to the organization unit, then click the Apply to Organization Unit button. 3. Navigate to the Apply to organization unit page.

   • Multiple preventive guardrails can be selected and applied simultaneously.

4. After selecting the organizational unit to which you want to apply the preventive guardrail, click the Complete button.

   Category	required status	Detailed description
   Preventive guardrails to apply	-	Preventive guardrails list to be applied at the organizational level
   Organizational unit name	Essential	Select the organizational unit to apply the preventive guardrail Only organizational units with Registered, Registration Failed status can be selected Click the organizational unit name or parent organizational unit name to view detailed information

   Table. Preventive guardrail application items

5. When the pop‑up window notifying that the preventive guardrail has been applied opens, click the Confirm button.

View detailed information of preventive guardrail

You can view detailed information about preventive guardrails, the organizational units to which they are applied, and the list of Accounts. To disable the preventive guardrail, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Go to the Preventive Guardrail List page.
3. Click the preventive guardrail name to view detailed information in the Preventive Guardrail List. 3. Preventive Guardrail Details page
   • Preventive Guardrail Details page consists of Basic Information, Applicable Organizational Unit, Account tab.

Basic Information

You can view basic and detailed information about the preventive guardrail.

Applicable organization unit

You can view the list of organizational units where preventive guardrails are applied.

Account

You can view the list of sub‑Accounts under the organizational unit where preventive guardrails are directly applied.

Disable preventive guardrail

You can disable the preventive guardrail applied at the organization level. To disable the preventive guardrail, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

2. On the Service Home page, click the Guardrail > Preventive Guardrail menu. 2. Navigate to the Preventive Guardrail List page.

3. From the Preventive Guardrail List, select the preventive guardrail for which you want to disable organization-level enforcement, then click the More > Remove Organization-Level Enforcement button. 3. Navigate to the Remove organization unit application page.

   • Multiple preventive guardrails can be selected simultaneously to disable them.

4. After selecting the organizational unit to disable the preventive guardrail, click the Complete button.

   Category	Whether required	Detailed description
   Guardrails to apply	-	List of preventive guardrails to be disabled
   Organizational unit name	Essential	Select the organizational unit to disable the preventive guardrail Only organizational units with Registered, Registration Failed status can be selected Click the organizational unit name or parent organizational unit name to view detailed information

   Table. Preventive Guardrail Deactivation Items

5. When a pop‑up notifying the deactivation of the preventive guardrail opens, click the Confirm button.

Detection Guardrail

When detection guardrails are enabled, Config Inspection diagnostics are automatically run for Accounts within the default organizational unit, performing checks daily.

Apply detection guardrails

You can apply detection guardrails on the Landing Zone Settings page.

To apply detection guardrails, follow the steps below.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Edit button for the Detection Guardrail item. 3. Detection Guardrail Settings The popup window opens.
4. Detection Guardrail Settings In the popup window, after checking Enable Cloud Control Detection Guardrail, click the Confirm button.
   • When activation is checked, Plan, Check List, Diagnosis Cycle, Start Time are displayed.
5. When the pop-up indicating that the detection guardrail is active opens, click the Confirm button.

Check detection guardrail diagnostic results

You can view the Config Inspection diagnostic results via detection guardrails. To view the diagnostic results, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Navigate to the Detection Guardrail List page.
3. Click the diagnosis name of the Account for which you want to view diagnostic results from the Detection Guardrail List. 3. Go to the Diagnostic Results List page.
   • In the search area of the Diagnosis Result List page, you can enter a diagnosis name or click the Advanced Search button to search.
4. On the Diagnosis Result List page, click the diagnosis result for the diagnosis name to view detailed diagnostic items. 4. Navigate to the Diagnostic Result Details page.
   • Completed: The diagnostic request has been successfully completed, when Completed is clicked, navigate to the detail page
   • Error: The diagnostic request was not completed successfully, and the error status item cannot view detailed information.
5. Diagnosis Result Details on the page

   Category	Detailed description
   Checklist	Set of diagnostic items that serve as the basis for diagnostic results
   Area	Scope of Diagnosis (services of Samsung Cloud Platform)
   Diagnostic Items	Security standards recommended for each service configuration Click the diagnostic item name to view detailed information about that diagnostic item Diagnostic item details: area, diagnostic item, result, diagnostic criteria, diagnostic method, remediation guide, detailed result
   Result	Diagnostic Item Baseline Check Results PASS: Number of items in the checklist with a diagnostic result of PASS (normal) FAIL: Number of items in the checklist with a diagnostic result of FAIL (vulnerable) CHECK: Number of items in the checklist with a diagnostic result of CHECK (needs verification) ERROR: Number of items in the checklist with a diagnostic result of ERROR (diagnosis not possible) N/A: Number of items in the checklist with a diagnostic result of N/A (not applicable)

   Table. Detailed Diagnosis Result Items

Managing detection guardrail diagnostic results

You can view the results of the Config Inspection diagnosis request via the detection guardrail.

To view the diagnostic request results, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Guardrail > Detection Guardrail menu. 2. Go to the Detection Guardrail List page.
3. In the Detection Guardrail List, click the diagnosis name of the Account that will manage the diagnostic results. 3. Go to the Diagnostic Results List page.
   • On the Diagnosis Result List page, you can enter a diagnosis name in the search area or click the Advanced Search button to search.
4. On the Diagnostic Result List page, click the Diagnostic Result Management button. 4. Diagnosis Result Management Navigate to the detail page.
5. Diagnostic Result Management View the diagnostic results on the detail page.

   Category	Detailed description
   Checklist	Collection of diagnostic items that serve as the basis for diagnostic results
   Area	Scope of Diagnosis (services of Samsung Cloud Platform)
   Diagnostic Items	Security standards recommended for each service configuration Click the diagnostic item name to view detailed information about that diagnostic item Diagnostic details: area, diagnostic item, result, diagnostic criteria, diagnostic method, remediation guide, detailed result
   Result	Diagnostic Item Baseline Check Results PASS: Number of items in the checklist with a diagnostic result of PASS (normal) FAIL: Number of items in the checklist with a diagnostic result of FAIL (vulnerable) CHECK: Number of items in the checklist with a diagnostic result of CHECK (needs verification) ERROR: Number of items in the checklist with a diagnostic result of ERROR (diagnosis not possible) N/A: Number of items in the checklist with a diagnostic result of N/A (not applicable)
   Result check / Result change	Result Verification: Detailed information can be viewed in the result verification popup Registrant, validity period, change status, detailed reason, attachment, inspection result Attachments can only be viewed in Config Inspection Inspection results cannot be deleted in Cloud Control Result Modification: Inspection results cannot be modified in Cloud Control

   Table. Diagnosis Result Management Items

Disable detection guardrail

On the Landing Zone Settings page, you can disable the detection guardrail. To disable the detection guardrail, follow these steps.

1. All Services > Management > Cloud Control menu, click it. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Edit button of the Detection Guardrail item. 3. Detection Guardrail Settings The popup window opens.
4. Detection Guardrail Settings in the popup window, uncheck Cloud Control Detection Guardrail Active.
5. When a popup that notifies the removal of detection guardrails opens, click the Confirm button.

2.2 - Managing Organizations

When a landing zone is created, you can use Cloud Control’s organization-level management features.

Manage Organizational Units

You can register and manage the organizational units that constitute an Organization in Cloud Control.

Create Organization Unit

You can create a new organizational unit and register it with Cloud Control.

To create an organizational unit and register it with Cloud Control, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.

2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.

4. After selecting the location in the hierarchical list where you want to add an organizational unit, click the Create Organizational Unit Under button. The Create Organizational Unit popup opens.

   • Root or only one organizational unit can be selected.
   • You can create organizational units up to five levels below Root.

5. Create Organizational Unit After entering the organizational unit information to add in the popup window, click the Create button.

   Category	Required	Detailed description
   Parent organization unit name	-	Name of the parent organizational unit for the organizational unit to be created
   Organizational unit name	Required	Enter the name of the organizational unit to be created within 128 characters Organizational names distinguish between uppercase and lowercase English letters
   Explanation	Selection	Enter a description of the organizational unit within 1,000 characters.

   Table. Organization unit creation items

6. When the popup that notifies the creation of an organizational unit opens, click the Confirm button.

   • It may take more than tens of minutes depending on the number of accounts under the organizational unit.
   • A notification will be sent when the organization unit creation is complete.

Register Organizational Unit

You can register organizational units that are not registered in Cloud Control or that failed to register, into Cloud Control.

To register an organizational unit in Cloud Control, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.

4. After selecting the organizational unit to register from the hierarchical list, click the More > Register Organizational Unit button. You will be taken to the Register Organizational Unit page.

5. On the Organization Unit Registration page, verify the information of the organization unit to be registered.

   Category	Whether required	Detailed description
   Sub Account	-	List of Accounts included under the organizational unit to be registered Automatically register in Cloud Control when registering the organizational unit
   Applicable preventive guardrails	-	List of guardrails inherited from higher-level organizational units and guardrails directly applied to the organization unit Click the guardrail name to view detailed information about that guardrail

   Table. Organization Unit Registration Items

   Reference

   • Preventive guardrails are inherited from higher-level organizational units.
   • To remove an inherited guardrail, disable its application in the parent organizational unit.

6. After reviewing the Terms of Service, check the checkbox and click the Complete button.

7. When the popup notifying the registration of an organizational unit opens, click the Confirm button. The organizational unit registration request is completed.

   • Depending on the number of accounts under the organizational unit, it can take several tens of minutes.
   • A notification will be sent once the organization unit registration is complete.

Re-register organizational unit

You can re-register an organizational unit that is already registered in Cloud Control.

To re-register an organizational unit in Cloud Control, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.

2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

3. Organizational Unit and Account Management page, click the View Hierarchy button in the top right corner.

4. In the hierarchical list, select the organizational unit to re‑register, then click the More > Re‑register Organizational Unit button. You will be taken to the Re‑register Organizational Unit page.

5. On the Organizational Unit Re-registration page, check the information of the organizational unit to be re-registered.

   Category	Required status	Detailed description
   Sub Account	-	List of Accounts included under the organizational unit to be re-registered Automatically register in Cloud Control when registering the organizational unit
   Applicable preventive guardrails	-	List of guardrails inherited from higher organizational units and guardrails directly applied to the organization unit Clicking a guardrail name allows you to view detailed information about that guardrail

   Table. Organization Unit Re-registration Items

   Reference

   • Preventive guardrails are inherited from higher-level organizational units.
   • To remove an inherited guardrail, disable its application at the parent organizational unit.

6. After reviewing the Terms of Service, check the checkbox and click the Complete button.

7. When the popup notifying re-registration of the organization unit opens, click the Confirm button. The organization unit re-registration request is completed.

   • Depending on the number of accounts under the organizational unit, it can take several tens of minutes.
   • A notification will be sent once the organization unit re-registration is complete.

Delete organization unit

You can delete an organizational unit.

To delete an organizational unit, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. You will be taken to the Organization unit and Account management page.
3. On the top right of the Organizational Unit and Account Management page, click the View Hierarchy button.
4. After selecting the organizational unit to delete from the hierarchical list, click the More > Delete Organizational Unit button.
5. When the popup notifying that the organizational unit will be deleted opens, click the Confirm button.

2.3 - Managing Accounts

Create Account

You can create an Account with the Account factory and apply Cloud Control directly without any additional steps.

To create an Account, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

2. On the Service Home page, click the Account Factory menu. You will be taken to the Account Factory page.

3. On the Account Factory page, click the Account Creation button. You will be taken to the Account Creation page.

4. On the Account creation page, enter the required information to create an Account and select an organizational unit, then click the Create button.

   Category	Required status	Detailed description
   Account information	Required	Enter the account name and email information Account name: Use Korean, English, numbers, spaces, and special characters (+=-_@[](),.) to enter between 3 ~ 30 characters Email: Enter up to 60 characters in a valid email address format Cannot duplicate the root user email Enter the same value in Email confirmation
   ID Center information	Required	Enter ID Center user information that can access the Account to be created Username: Use English letters, numbers, and special characters(+=-_@,.) within 128 characters User’s real name: Enter the user’s actual name (surname and given name) If the Account access configuration uses self-managed Account access, ID Center information cannot be set
   Select organization unit	Required	Select the parent organization unit that will contain the Account to be created Only organization units with registered status can be selected Clicking the organization unit name navigates to its detailed page

   Table. Landing zone creation - cost review and organizational unit configuration items

   Caution

   An Excel file containing Access Portal user login information will be sent to the email entered in the ID Center. Be sure to verify that the email address is correct.

5. When a popup notifying Account creation opens, click the Confirm button. The Account creation request is completed.

   • Creating an account takes some time, and a notification is sent when the process is complete.

Manage Account

You can register and manage the accounts that comprise the organization in Cloud Control.

Register Account

You can register organizational units that are not registered in Cloud Control or that failed to register, into Cloud Control.

To register an Account, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to Cloud Control’s Service Home page.

2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.

3. In the top right corner of the Organization Unit and Account Management page, click the View Account List button.

4. From the Account list, select the Account to register in Cloud Control, then click the Account registration button. You will be taken to the Account registration page.

   • After clicking the Account name of the Account to be registered, you can also register by clicking the Register button on the Account Details page.

     Category	Required status	Detailed description
     Current organizational unit	-	The organizational unit to which the Account belongs
     Register organization unit	-	Select the organizational unit to register the Account Only organizational units with registration status can be selected Current organizational unit: Register directly to the current organizational unit Other organizational unit: Manually select a different organizational unit

     Table. Account registration items

5. When a popup notifying the Account registration opens, click the Confirm button.

Move Account

You can change the organizational unit of an Account registered in Cloud Control and move it.

To move the Account, follow the steps below.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. You will be taken to the Organization Units and Account Management page.
3. On the Organization Unit and Account Management page, click the View Account List button in the top right corner.
4. In the Account list, click the Account name whose organizational unit you want to change. You will be taken to the Account Details page.
5. On the Account Details page, click the Register button. You will be taken to the Account Register page.
6. From the Registered organization unit list, select the organization unit to which the Account will be moved, then click the Complete button.
   • Only organizational units with registered status can be selected.
7. When the popup notifying the Account registration opens, click the Confirm button.

Unregister Account

You can deregister an Account that is registered in the Organization.

1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
2. On the Service Home page, click the Organization Configuration menu. You will be taken to the Organization Configuration page.
3. On the Organization Structure page, click the View Account List button.
4. After selecting the Account to exclude from the Organization, click the More > Unregister Account button.
   • After clicking the Account name of the Account to be deregistered, you can also deregister by clicking the Deregister button on the Account Details page.
5. When a popup that notifies the Account deregistration opens, click the Confirm button.

Delete Account

You can delete the account.

1. Click the All Services > Management > Organization menu. Go to the Service Home page of Organization.
2. On the Service Home page, click the Organizational Structure menu. You will be taken to the Organizational Structure page.
3. On the Organization Structure page, click the View Account List button.
4. After selecting the Account to delete from the Account list, click the More > Delete Account button. The Delete Account popup opens.
   • After clicking the Account name of the Account to be deleted, you can also delete it by clicking the Delete Account button on the Account Details page.
5. After entering the Account name to delete, click the Confirm button.

–>

Check Shared Account

You can view the shared Account information in Cloud Control. To check shared account information, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Shared Account menu. You will be taken to the Shared Account page.
   • The Shared Account page consists of the Management Account, Log Account, and Audit Account widgets.
   • Each widget displays the Account name, Account ID, and email information, and clicking the widget name takes you to that Account’s detail page.

     Category	Detailed description
     Management Account	Account that creates new Accounts and manages billing and access for all Accounts in the organization
     Log Account	The account used as the repository for API activity and resource configuration logs collected from all accounts.
     Audit Account	A restricted account that enables the security and compliance team to obtain read and write access to all accounts.

     Table. Shared Account items

3 - API Reference

4 - CLI Reference

5 - Release Note

Cloud Control