25 lines
664 B
Markdown
25 lines
664 B
Markdown
---
|
||
title: "AWS Landing Zone"
|
||
type: concept
|
||
tags:
|
||
- AWS
|
||
- Architecture
|
||
- Multi-Account
|
||
---
|
||
|
||
## Definition
|
||
AWS Landing Zone 是 AWS 推荐的企业级云基础架构框架，通过多账号策略、安全基线、网络架构等组件提供安全、可扩展的云环境起点。
|
||
|
||
## Key Components
|
||
- **多账号策略**：通过 AWS Organizations 管理多个账户
|
||
- **安全基线**：安全组、SCP、密码策略等
|
||
- **网络架构**：VPC、Transit Gateway、VPN/Direct Connect
|
||
- **身份管理**：IAM 角色、SSO、AD 集成
|
||
|
||
## Related Concepts
|
||
- [[Network-Segregation]]
|
||
- [[SSM-Access]]
|
||
- [[Gruntwork-Landing-Zone]]
|
||
|
||
## Related Entities
|
||
- [[AWS]] |