Difference between LZA and AFT

Question

Hello team ,
 I have started studying about LZA . AFT mainly used for account provisioning and customization and what does LZA do ?  can LZA be used to provision new aws account ?

Accepted Answer

As quoted in [this article](https://www.sierra-cedar.com/2023/06/13/aws-account-factory-for-terraform-vs-aws-landing-zone-accelerator/), One of the main differences between AFT and Landing Zone Accelerator is that AFT is an open-source tool, while Landing Zone Accelerator is a proprietary tool. AFT sets up a Terraform pipeline that helps you provision and customize your accounts in AWS Control Tower. Landing Zone Accelerator, conversely, is a proprietary solution that deploys a cloud foundation that is architected to align with AWS best practices and multiple global compliance frameworks.

LZA supports Acount Creation with Control Tower. Here is [relevant documentation](https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/account-creation-and-drift-detection.html) that can help you.

LZA is one of atleast 4 tools (AFC, AFT, CfCT & LZA) available to customize a Control Tower environment. The article I shared is a an excellent point resource that will help you compare and evaluate LZA and AFT. Please feel free to follow up here with any further questions you may have.

Answer

Landing Zone Accelerator (LZA) is a provided as an open-source project that AWS built using the AWS Cloud Development Kit (AWS CDK). You can install it directly into your environment, giving you full access to the infrastructure as code (IaC) solution. For more details, please refers to LZA Implementation Guide at: https://docs.aws.amazon.com/solutions/latest/landing-zone-accelerator-on-aws/solution-overview.html

LZA can enable Identity Center(SSO) and configure permission set for AWS Account. Refers to example at: https://awslabs.github.io/landing-zone-accelerator-on-aws/classes/_aws_accelerator_config.IdentityCenterConfig.html

Difference between LZA and AFT

相關內容