AWS Control Tower now provides you with the ability to manage and customize your shared and management accounts with Account Factory for Terraform (AFT). You can now centralize your account customization management and increase governance coverage of your AWS Control Tower environment while still protecting the security of your account configurations. Shared account customization assists customers that want the ability to use the same mechanism for customization across all of their accounts. AFT has also made a role change to help you better manage the permissions of your customizations. You will now be able to fully automate your permission management for AFT to act on all of your accounts with any level of granularity.
Source:: Amazon AWS