本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
Account Factory 的資源考量事項
使用 Account Factory 佈建帳戶時,會在帳戶中建立下列 AWS 資源。
| AWS 服務 | Resource Type (資源類型) | 資源名稱 |
|---|---|---|
| AWS CloudFormation | 堆疊 |
StackSet-AWSControlTowerBP-BASELINE-CLOUDTRAIL-* (未在登陸區域 3.0 版及更新版本中部署) StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-* StackSet-AWSControlTowerBP-BASELINE-CONFIG-* StackSet-AWSControlTowerBP-BASELINE-ROLES-* StackSet-AWSControlTowerBP-BASELINE-SERVICE-ROLES-* |
| AWS CloudTrail | 追蹤 | aws-controltower-BaselineCloudTrail |
| AWS Config | 交付管道 | aws-controltower-BaselineConfigDeliveryChannel |
| AWS Config | 記錄器 | aws-controltower-BaselineConfigRecorder |
| Amazon CloudWatch | CloudWatch Logs |
/aws/lambda/aws-controltower-NotificationForwarder |
| AWS Identity and Access Management | 角色 | aws-controltower-AdministratorExecutionRole aws-controltower-CloudWatchLogsRole (未在登陸區域 3.0 版及更新版本中部署) aws-controltower-ConfigRecorderRole (未在登陸區域 2.8 版及更新版本中部署) aws-controltower-ForwardSnsNotificationRole aws-controltower-ReadOnlyExecutionRole AWSControlTowerExecution |
| AWS Identity and Access Management | 政策 | AWSControlTowerServiceRolePolicy |
| Amazon Simple Notification Service | 主題 | aws-controltower-SecurityNotifications |
| AWS Lambda | 應用程式 | StackSet-AWSControlTowerBP-BASELINE-CLOUDWATCH-* |
| AWS Lambda | 函數 | aws-controltower-NotificationForwarder |
| Amazon EventBridge | 規則 | AWSControlTowerManagedRule |
| Amazon EventBridge | 規則 | aws-controltower-ConfigComplianceChangeEventRule |