No additional charge exists for using AWS Control Tower. You only pay for the AWS services enabled
by AWS Control Tower, and the services you use in your landing zone. For example, you pay for Service Catalog for
provisioning accounts with Account Factory, and AWS CloudTrail for events tracked in your landing zone. For
information about the pricing and fees associated with AWS Control Tower, see AWS Control Tower pricing
If you are running ephemeral workloads from accounts in AWS Control Tower, you may see an increase
in costs associated with AWS Config. For details, see AWS Config pricing
If you implement AWS CloudTrail trails outside of AWS Control Tower, you can use them with AWS Control Tower. However, you may incur duplicate charges, if you also opt in to trails managed by AWS Control Tower. We do not recommend setting up external trails, unless you have a specific requirement. If you choose to opt in during landing zone setup or update, AWS Control Tower sets up and activates an organization-level CloudTrail trail for you in the management account. For information about managing CloudTrail costs, see Managing CloudTrail costs.