View a markdown version of this page

Account Factory 的资源注意事项 - AWS Control Tower

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

Account Factory 的资源注意事项

使用 Account Factory 为账户配置时,将在该账户中创建以下 AWS 资源。

AWS 服务 资源类型 资源名称
AWS CloudFormation 堆栈

StackSet-AWSControlTowerBP-BASELINE-CLOUDTRAIL-*(未在 landing zone 版本 3.0 及更高版本中部署)

StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-*

StackSet-AWSControlTowerBP-BASELINE-CONFIG-*

StackSet-AWSControlTowerBP-BASELINE-ROLES-*

StackSet-AWSControlTowerBP-BASELINE-SERVICE-ROLES-*

AWS CloudTrail 试用 aws-controltower-BaselineCloudTrail
AWS Config 配送渠道 aws-controltower-BaselineConfigDeliveryChannel
AWS Config 录音机 aws-controltower-BaselineConfigRecorder
Amazon CloudWatch CloudWatch 日志

/aws/lambda/aws-controltower-NotificationForwarder

AWS Identity and Access Management 角色

aws-controltower-AdministratorExecutionRole

aws-controltower-CloudWatchLogsRole(未在 landing zone 版本 3.0 及更高版本中部署)

aws-controltower-ConfigRecorderRole(未在 landing zone 版本 2.8 及更高版本中部署)

aws-controltower-ForwardSnsNotificationRole

aws-controltower-ReadOnlyExecutionRole

AWSControlTowerExecution

AWS Identity and Access Management 策略

AWSControlTowerServiceRolePolicy

Amazon Simple Notification Service 主题 aws-controltower-SecurityNotifications
AWS Lambda 应用程序 StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-*
AWS Lambda 函数 aws-controltower-NotificationForwarder
Amazon EventBridge 规则 AWSControlTowerManagedRule
Amazon EventBridge 规则 aws-controltower-ConfigComplianceChangeEventRule