- 最新
- 投票最多
- 评论最多
As quoted in this article, One of the main differences between AFT and Landing Zone Accelerator is that AFT is an open-source tool, while Landing Zone Accelerator is a proprietary tool. AFT sets up a Terraform pipeline that helps you provision and customize your accounts in AWS Control Tower. Landing Zone Accelerator, conversely, is a proprietary solution that deploys a cloud foundation that is architected to align with AWS best practices and multiple global compliance frameworks.
LZA supports Acount Creation with Control Tower. Here is relevant documentation that can help you.
LZA is one of atleast 4 tools (AFC, AFT, CfCT & LZA) available to customize a Control Tower environment. The article I shared is a an excellent point resource that will help you compare and evaluate LZA and AFT. Please feel free to follow up here with any further questions you may have.
Landing Zone Accelerator (LZA) is a provided as an open-source project that AWS built using the AWS Cloud Development Kit (AWS CDK). You can install it directly into your environment, giving you full access to the infrastructure as code (IaC) solution. For more details, please refers to LZA Implementation Guide at: https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/solution-overview.html
LZA can enable Identity Center(SSO) and configure permission set for AWS Account. Refers to example at: https://awslabs.github.io/landing-zone-accelerator-on-aws/classes/_aws_accelerator_config.IdentityCenterConfig.html
相关内容
AWS 官方已更新 3 年前- AWS 官方已更新 3 年前
Does LZA creates SSO along with account creation as like AFT does ?