Can anyone comment on their experiences using Control Tower? Currently we have an account factory in pulumi that we can use to create new sandbox accounts. I'm in favor of keeping it in pulumi (vs. CloudFormation templates in the Control Tower account factory). Control Tower doesn't have an API, so it can't be described/reproduced readily using pulumi.

i haven't used it in anger, but I believe the control tower account factory just uses the organization API, which we support. You could also define youd formation stack with Pulumi, which is always a little weird but works!