**To describe a Control Tower landing zone**

The following ``get-landing-zone`` example gets details of an AWS Control Tower landing zone. ::

    aws controltower get-landing-zone \
        --landing-zone-identifier arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5

Output::

    {
        "landingZone": {
            "arn": "arn:aws:controltower:us-east-1:123456789012:landingzone/13CJG46WZKXXX4X5",
            "driftStatus": {
                "status": "IN_SYNC"
            },
            "latestAvailableVersion": "3.3",
            "manifest": {
                "accessManagement": {
                    "enabled": true
                },
                "securityRoles": {
                    "accountId": "098765432101"
                },
                "governedRegions": [
                    "us-east-1",
                    "us-west-2"
                ],
                "organizationStructure": {
                    "security": {
                        "name": "Security"
                    }
                },
                "centralizedLogging": {
                    "accountId": "111122223333",
                    "configurations": {
                        "loggingBucket": {
                            "retentionDays": 365
                        },
                        "kmsKeyArn": "arn:aws:kms:us-east-1:123456789012:key/example-key-id",
                        "accessLoggingBucket": {
                            "retentionDays": 3650
                        }
                    },
                    "enabled": true
                }
            },
            "status": "ACTIVE",
            "version": "3.3"
        }
    }

For more information, see `Getting started with AWS Control Tower <https://docs.aws.amazon.com/controltower/latest/userguide/getting-started-with-control-tower.html>`__ in the *AWS Control Tower User Guide*.