{"id":76983,"date":"2023-01-25T17:56:00","date_gmt":"2023-01-25T17:56:00","guid":{"rendered":"https:\/\/www.globallogic.com\/il\/insights\/%insight%\/deploying-a-landing-zone-with-aws-control-tower-part-2\/"},"modified":"2025-01-20T07:16:54","modified_gmt":"2025-01-20T07:16:54","slug":"deploying-a-landing-zone-with-aws-control-tower-part-2","status":"publish","type":"insightsection","link":"https:\/\/www.globallogic.com\/il\/insights\/blogs\/deploying-a-landing-zone-with-aws-control-tower-part-2\/","title":{"rendered":"Deploying a Landing Zone with AWS Control Tower &#8211; Part 2"},"content":{"rendered":"<div class=\"classic_editor_content\">Previously in\u00a0Part 1, we delivered a brief background on what a Landing Zone is, before going through how to launch AWS Control Tower as the foundation of a Multi-Account Architecture.<\/p>\n<p>Part 2 of the blog series will walkthrough some of the initial post configuration activities with Control Tower, including setting up the organisational structure and enabling guardrails.<\/p>\n<h4>What has Control Tower deployed?<\/h4>\n<p>As part of the setup, Control Tower has utilised a number of other AWS Services including:<\/p>\n<ul>\n<li><strong>AWS CloudFormation:<\/strong>\u00a0This has been utilised for provisioning resources through Infrastructure as Code (IaC) across the multiple AWS Accounts, using a combination of both Stacks and StackSets.<\/li>\n<li><strong>AWS CloudTrail:<\/strong>\u00a0An Organisational Trail has been configured in the Management AWS Account. This Trail is configured to: monitor all AWS regions, send its logs to an S3 Bucket (that is in the Log Archive account), is encrypted using the KMS CMK that was created during the Control Tower setup, has Log File Validation Enabled, is integrated with CloudWatch Logs and also configured to send notifications to an SNS Topic in the Audit Account when new logs files are sent to the S3 Bucket.<\/li>\n<li><strong>Amazon CloudWatch:<\/strong>\u00a0CloudWatch Log Groups are created as part of the integration with the CloudTrail Trail, as well as any execution of the Lambda Functions deployed by the Control Tower setup.<\/li>\n<li><strong>AWS Config:<\/strong>\u00a0An Organisation Config Aggregator is created within the Management Account and Config Recorders are created in all AWS Accounts within the AWS Organisation, except for the Management Account. In addition, several Config Rules will be created as part of the Mandatory Guardrails configured during the setup process.<\/li>\n<\/ul>\n<p>Quick note: Since Control Tower doesn\u2019t create a Config Recorder in the Management Account, AWS Config is something that should have been enabled in all AWS Accounts. We will explain how you can do this using Customisations for Control Tower later in the blog,<\/p>\n<ul>\n<li><strong>Amazon EventBridge:<\/strong>\u00a0An EventBridge Rule is created within all AWS Accounts except for the Management Account to trigger a Lambda Function on any Config Rule Compliance Change.<\/li>\n<li><strong>AWS IAM:<\/strong>\u00a0Several IAM Roles are created including IAM Service Roles. The IAM Roles have IAM Permissions Policies added to them to grant the relevant level of permissions, and the Trust Policies are configured to allow the Role Assumption by only specific Source AWS Accounts, AWS Services or via the SSO Identity Provider using SAML.<\/li>\n<li><strong>AWS IAM Identity Centre:<\/strong>\u00a0This service gets enabled within the Home Region of Control Tower to provide Single Sign-On. Several Groups &amp; Permission Sets are created, and those Groups then have a Permission Set assigned to them against the provisioned AWS Accounts within the AWS Organisation (Management, Audit and Log Archive Accounts). A User is also created that maps to the e-mail address of the root user of the Management AWS Account.<\/li>\n<li><strong>AWS KMS:<\/strong>\u00a0AWS Managed KMS keys are utilised for the encryption of data at rest in conjunction with the creation of the S3 Buckets. In addition, as part of our setup configuration we also created a Customer Managed Key (CMK) to encrypt the CloudTrail Trail.<\/li>\n<li><strong>AWS Lambda:<\/strong>\u00a0A Lambda Function is created within all AWS Accounts except for the Management Account. This Function is used as part of the mechanism for forwarding notifications of Config Rule compliance changes.<\/li>\n<li><strong>AWS Organisations:<\/strong>\u00a0This has been used to create the Organisation which is crucial to a multi-account setup. As part of the Organisation, it has then setup two Organisational Units (OU) that were defined during the Shared Accounts page of the Control Tower setup. Typically, these OUs will be named Security (in previous versions of the Control Tower service it was named Core) and the other Sandbox. In addition, several Service Control Policies (SCP) will have been created as part of the Mandatory Guardrails configured during the setup process.<\/li>\n<li><strong>Amazon S3:<\/strong>\u00a0Two S3 Buckets are deployed within the Log Archive account.\n<ul>\n<li>One Bucket is used for the storage of CloudTrail and Config logs as part of a Centralised Logging Solution. It is configured with Default Encryption using KMS (AWS Managed Keys), has Versioning enabled, a Bucket Policy to restrict access, is configured to Block Public Access, Access Logging enabled and is configured with a Lifecycle Policy.<\/li>\n<li>The second Bucket \u00a0is used for the storage of the S3 Access Logs. It is configured with Default Encryption using KMS (AWS Managed Keys), has Versioning enabled, a Bucket Policy to restrict access, is configured to Block Public Access, Access Logging enabled and is configured with a Lifecycle Policy.<\/li>\n<\/ul>\n<\/li>\n<li><strong>AWS Service Catalog:<\/strong>\u00a0A Portfolio is created with a Product added that provides Control Tower with Account Factory component.<\/li>\n<li><strong>Amazon SNS:<\/strong>\u00a0An SNS Topic is created within all AWS Accounts except for the Management Account. That Topic has a destination of a Lambda Function that forwards the message to another SNS Topic in the Audit Account, which in turn sends an e-mail to the e-mail address assigned to the root user of the Audit Account.<\/li>\n<li><strong>AWS Step Functions:<\/strong>\u00a0Whilst the Control Tower setup implements State Machines that is used as part of the wider orchestration and for the Account Factory element, these are not visible within any of the AWS Accounts that exist in the AWS Organisation. These are under the control and management of AWS as part of the Service Offering.<\/li>\n<\/ul>\n<h4>Organisational Structure<\/h4>\n<p>When considering organisational structure, there is a really good blog post from AWS on the\u00a0<a rel=\"external nofollow\" target=\"_blank\" href=\"https:\/\/aws.amazon.com\/blogs\/mt\/best-practices-for-organizational-units-with-aws-organizations\/\">Best Practices for Organisational Units<\/a>\u00a0(OU) that describes each of the OUs and their purpose. Please note, these are just guidelines and should be tailored to meet the needs of your particular business.<\/p>\n<p>The diagram below is based on what can typically be seen when working with Clients. We\u2019ve also outlined steps to creating the OU structure.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76984\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/control-tower-org-300x211.jpg\" alt=\"\" width=\"658\" height=\"463\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/control-tower-org-300x211.jpg 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/control-tower-org-768x541.jpg 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/control-tower-org.jpg 1021w\" sizes=\"auto, (max-width: 658px) 100vw, 658px\" \/><\/p>\n<h4>Creating the Organisational Units Structure<\/h4>\n<ul>\n<li>Login to the AWS Management Console and Navigate to Control Tower.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76985\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10-300x161.png\" alt=\"\" width=\"658\" height=\"353\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10-300x161.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10-1024x551.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10-768x413.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10-1536x826.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-10.png 1920w\" sizes=\"auto, (max-width: 658px) 100vw, 658px\" \/><\/p>\n<ul>\n<li>Click\u00a0<strong>Organisation<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76986\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11-300x161.png\" alt=\"\" width=\"663\" height=\"356\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11-300x161.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11-1024x551.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11-768x413.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11-1536x826.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-11.png 1920w\" sizes=\"auto, (max-width: 663px) 100vw, 663px\" \/><\/p>\n<ul>\n<li>Click\u00a0<strong>Create resources<\/strong>\u00a0and then select\u00a0<strong>Create organisational unit<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76987\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12-300x161.png\" alt=\"\" width=\"665\" height=\"357\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12-300x161.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12-1024x551.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12-768x413.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12-1536x826.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-12.png 1920w\" sizes=\"auto, (max-width: 665px) 100vw, 665px\" \/><\/p>\n<ul>\n<li>On the <strong>Add an OU<\/strong> page; enter the\u00a0<strong>OU Name<\/strong>, click\u00a0<strong>Parent OU<\/strong>\u00a0and then select the\u00a0<strong>OU Name<\/strong>\u00a0to replicate the high level organisation layout.<\/li>\n<\/ul>\n<p>Once configured it will look something like the below screenshot.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76988\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13-300x161.png\" alt=\"\" width=\"665\" height=\"357\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13-300x161.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13-1024x551.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13-768x413.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13-1536x826.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-13.png 1920w\" sizes=\"auto, (max-width: 665px) 100vw, 665px\" \/><\/p>\n<p>Please note: Only Organisation Units that have been created through the Control Tower Console will show a state of \u201cRegistered\u201d on the Organisation page in Control Tower. If the Organisation Unit was created either via the AWS CLI or within AWS Organisations, it will show a state of \u201cUnregistered\u201d and will therefore need to be registered by selecting the OU in question on the Organisation page in the Control Tower console, selecting \u201cActions\u201d and then clicking \u201cRegister organisational unit\u201d.<\/p>\n<p>Once you\u2019ve created your OU Structure, you\u2019re ready to configure guardrails.<\/p>\n<h4>Configuring Guardrails in Control Tower<\/h4>\n<p>Guardrails are rules that enable you to provide ongoing governance and oversight across your environment. In terms of guardrails within Control Tower there are two different types \u2013\u00a0preventative and detective.<\/p>\n<p>Preventative guardrails are implemented through Service Control Policies (SCP) and stop you from going outside of a specific set of boundaries, as defined within the SCP. Since SCPs are implemented at the Organisation level, it provides a layer of control over all AWS Accounts within the organisation without needing to implement something directly in every single AWS Account.<\/p>\n<p>Detective guardrails are implemented through Config Rules and will send notifications if a resource within the individual AWS Account doesn\u2019t adhere to the settings within the rule. For example, if the rule says that all EBS Volumes must be encrypted and there is an EBS Volume within the Account that isn\u2019t, it will notify you.<\/p>\n<p>Control Tower guardrails can only be implemented on Organisation Units and not directly on AWS Accounts. That\u2019s not to say you couldn\u2019t create something customised but in that case, you would need to write some automation to do this and it wouldn\u2019t be shown within the Control Tower console, if something was non-compliant.<\/p>\n<p>Enabling a guardrail in Control Tower creates a CloudFormation StackSet in the Management Account. Leveraging the integration with AWS Organisations adds a CloudFormation Stack Instance for each AWS Account, residing within the hierarchy of the OU that the guardrail was enabled onto the StackSet. This in turn creates a CloudFormation Stack within the corresponding AWS Account. Similarly with the disabling of a guardrail, it deletes the Stack Instance from the StackSet and then deletes the Stack from the corresponding AWS Account.<\/p>\n<h4>How to enable and disable a guardrail<\/h4>\n<p>We\u2019ve covered what happens when you enable a guardrail. Now let\u2019s walk through how you go about enabling and disabling a guardrail from scratch. Both processes are similar, but obviously you will need to have enabled a guardrail before being able to disable it!<\/p>\n<ul>\n<li>Login to the AWS Management Console and Navigate to Control Tower.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76989\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14-300x161.png\" alt=\"\" width=\"674\" height=\"362\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14-300x161.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14-1024x551.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14-768x413.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14-1536x826.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-14.png 1920w\" sizes=\"auto, (max-width: 674px) 100vw, 674px\" \/><\/p>\n<ul>\n<li>Click\u00a0&#8216;<strong>Guardrails\u2019<\/strong>.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76990\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15-300x181.png\" alt=\"\" width=\"675\" height=\"407\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15-300x181.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15-1024x619.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15-768x464.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15-1536x928.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-15.png 1920w\" sizes=\"auto, (max-width: 675px) 100vw, 675px\" \/><\/p>\n<ul>\n<li>Find the guardrail that you want to implement by either scrolling through the pages until you locate it or by using the filter mechanism.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76991\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16-300x181.png\" alt=\"\" width=\"675\" height=\"407\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16-300x181.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16-1024x619.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16-768x464.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16-1536x928.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-16.png 1920w\" sizes=\"auto, (max-width: 675px) 100vw, 675px\" \/><\/p>\n<ul>\n<li>Click the Name of the\u00a0<strong>guardrail<\/strong>. For example, \u201cDetect whether public read access to Amazon S3 buckets is allowed\u201d.<\/li>\n<\/ul>\n<p>If the guardrail is already enabled and you\u2019re looking to disable, click the \u2018<strong>Disable guardrail<\/strong>\u2019 option \u2013\u00a0like so:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76992\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17-300x181.png\" alt=\"\" width=\"680\" height=\"410\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17-300x181.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17-1024x619.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17-768x464.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17-1536x928.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-17.png 1920w\" sizes=\"auto, (max-width: 680px) 100vw, 680px\" \/><\/p>\n<p>If you\u2019re looking to enable a guardrail for the first time, click on the \u2018<strong>Enable guardrail on OU\u2019 <\/strong>button. The \u2018<strong>Disable guardrail<\/strong>\u2019 option should be greyed out.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-76998\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/blog-2-10-300x181.png\" alt=\"\" width=\"678\" height=\"409\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/blog-2-10-300x181.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/blog-2-10.png 604w\" sizes=\"auto, (max-width: 678px) 100vw, 678px\" \/><\/p>\n<ul>\n<li>A new page will load \u2013 click the \u2018<strong>Enable guardrail on OU\u2019 <\/strong>button again to enable.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\" wp-image-76993\" src=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18-300x181.png\" alt=\"\" width=\"678\" height=\"409\" srcset=\"https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18-300x181.png 300w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18-1024x619.png 1024w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18-768x464.png 768w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18-1536x928.png 1536w, https:\/\/www.globallogic.com\/il\/wp-content\/uploads\/sites\/11\/2023\/03\/setup-part-18.png 1920w\" sizes=\"auto, (max-width: 678px) 100vw, 678px\" \/><\/p>\n<p>From here:<\/p>\n<ul>\n<li>Select the\u00a0<strong>OU<\/strong>\u00a0that you want to enable\/disable the guardrail on and then click\u00a0<strong>Enable guardrail on OU <\/strong>or <strong>Disable guardrail<\/strong>.<\/li>\n<li>Repeat the process again for each OU that you want to enable\/disable the guardrail on. Unfortunately, at this moment in time, it can\u2019t be added or removed from multiple OUs at the same time.<\/li>\n<\/ul>\n<p>Repeat the process for all guardrails that you wish to enable.<\/p>\n<p>And that\u2019s it. You\u2019re good to go.<\/p>\n<p>Part 3\u00a0of this blog series will continue with the remaining post-deployment activities within Control Tower \u2013 including configuring IAM Identity Centre and provisioning a new AWS Account through Account Factory.<\/p>\n<h4>About the author:<\/h4>\n<p>Adam Divall, Solutions Architect at GlobalLogic with over 20 years demonstrable experience in design, implementation, migration and support of large, complex solutions to support a customer\u2019s long term business strategy. Divall holds all 12 available certifications for Amazon Web Services with specialisations including Networking, Security, Database, Data Analytics and Machine Learning.<\/p>\n<p>This doesn\u2019t sound right. What are you trying to say?<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Part 2 of the blog series will walkthrough some of the initial post configuration activities with Control Tower, including setting up the organisational structure and enabling guardrails.<\/p>\n","protected":false},"author":10,"featured_media":0,"parent":0,"menu_order":23,"template":"","insight":[41],"insight-subcats":[],"insight-industry":[750],"insight-services":[],"insight-partners":[921],"class_list":["post-76983","insightsection","type-insightsection","status-publish","hentry","insight-blogs","insight-industry-technology"],"acf":[],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insightsection\/76983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insightsection"}],"about":[{"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/types\/insightsection"}],"author":[{"embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/users\/10"}],"version-history":[{"count":1,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insightsection\/76983\/revisions"}],"predecessor-version":[{"id":101351,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insightsection\/76983\/revisions\/101351"}],"wp:attachment":[{"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/media?parent=76983"}],"wp:term":[{"taxonomy":"insight","embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insight?post=76983"},{"taxonomy":"insight-subcats","embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insight-subcats?post=76983"},{"taxonomy":"insight-industry","embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insight-industry?post=76983"},{"taxonomy":"insight-services","embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insight-services?post=76983"},{"taxonomy":"insight-partners","embeddable":true,"href":"https:\/\/www.globallogic.com\/il\/wp-json\/wp\/v2\/insight-partners?post=76983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}