After Organizations and SCP launched in 2017, one major problem remained: every time a new account was created, the same tasks had to be repeated. Enable CloudTrail, enable Config, create baseline IAM Role, attach SCP, configure trail routing to Log Archive, connect Audit account to GuardDuty Master — 30 minutes to an hour per account. Creating 100 accounts meant 100 hours. Miss one step and that account fails PCI audit.
The solution to this problem is the Landing Zone concept: automatically building a "baseline infrastructure" for multi-account environments in one go. 2017-2018, AWS provided the AWS Landing Zone solution based on CloudFormation