기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.
랜딩 존은 스키마를 통해 생성되는 AWS 리소스입니다. 각 AWS Control Tower 랜딩 존 버전에는 고유한 스키마가 있습니다.
AWS Control Tower 랜딩 존 버전 3.1 이상의 스키마는 호환되는 버전을 선택하는 데 도움이 되도록이 참조 섹션에 게시되어 있습니다.
참고
불필요한 액세스 로깅과 관련된 알려진 문제는 랜딩 존 버전 3.0에 있습니다. 이 문제는 랜딩 존 버전 3.1에서 해결되었습니다. 변경에 대한 내용은 AWS Control Tower 랜딩 존 버전 3.1 섹션을 참조하세요.
랜딩 존 3.1 스키마
{ "type": "object", "required": [ "centralizedLogging", "organizationStructure", "securityRoles" ], "properties": { "accessManagement": { "$ref": "#/definitions/AccessManagement" }, "backup": { "$ref": "#/definitions/Backup" }, "centralizedLogging": { "$ref": "#/definitions/CentralizedLogging" }, "governedRegions": { "type": "array", "items": { "type": "string", "maxLength": 24, "minLength": 1, "pattern": "^[a-z]{2}-[a-z\\-]*-[0-9]{1}$", "additionalProperties": false }, "additionalProperties": false }, "organizationStructure": { "$ref": "#/definitions/OrganizationStructure" }, "securityRoles": { "$ref": "#/definitions/SecurityRoles" } }, "additionalProperties": false, "definitions": { "AccessManagement": { "type": "object", "required": [ "enabled" ], "properties": { "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "Backup": { "type": "object", "properties": { "configurations": { "$ref": "#/definitions/BackupConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": false } }, "additionalProperties": false, "if": { "properties": { "enabled": { "const": true } } }, "then": { "required": [ "configurations" ] } }, "BackupAdminConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "BackupConfigurations": { "type": "object", "required": [ "backupAdmin", "centralBackup", "kmsKeyArn" ], "properties": { "backupAdmin": { "$ref": "#/definitions/BackupAdminConfigurations" }, "centralBackup": { "$ref": "#/definitions/CentralBackupConfigurations" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false } }, "additionalProperties": false }, "CentralBackupConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "CentralizedLogging": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false }, "configurations": { "$ref": "#/definitions/LoggingConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "LoggingConfigurations": { "type": "object", "properties": { "accessLoggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false }, "loggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" } }, "additionalProperties": false }, "OrganizationalUnit": { "type": "object", "required": [ "name" ], "properties": { "name": { "type": "string", "maxLength": 120, "minLength": 1, "pattern": "^[\\s\\S]*$", "additionalProperties": false } }, "additionalProperties": false }, "OrganizationStructure": { "type": "object", "required": [ "security" ], "properties": { "sandbox": { "$ref": "#/definitions/OrganizationalUnit" }, "security": { "$ref": "#/definitions/OrganizationalUnit" } }, "additionalProperties": false }, "S3BucketConfiguration": { "type": "object", "properties": { "retentionDays": { "type": "number", "minimum": 1, "additionalProperties": false } }, "additionalProperties": false }, "SecurityRoles": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false } } }
랜딩 존 3.2 스키마
{ "type": "object", "required": [ "centralizedLogging", "organizationStructure", "securityRoles" ], "properties": { "accessManagement": { "$ref": "#/definitions/AccessManagement" }, "backup": { "$ref": "#/definitions/Backup" }, "centralizedLogging": { "$ref": "#/definitions/CentralizedLogging" }, "governedRegions": { "type": "array", "items": { "type": "string", "maxLength": 24, "minLength": 1, "pattern": "^[a-z]{2}-[a-z\\-]*-[0-9]{1}$", "additionalProperties": false }, "additionalProperties": false }, "organizationStructure": { "$ref": "#/definitions/OrganizationStructure" }, "securityRoles": { "$ref": "#/definitions/SecurityRoles" } }, "additionalProperties": false, "definitions": { "AccessManagement": { "type": "object", "required": [ "enabled" ], "properties": { "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "Backup": { "type": "object", "properties": { "configurations": { "$ref": "#/definitions/BackupConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": false } }, "additionalProperties": false, "if": { "properties": { "enabled": { "const": true } } }, "then": { "required": [ "configurations" ] } }, "BackupAdminConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "BackupConfigurations": { "type": "object", "required": [ "backupAdmin", "centralBackup", "kmsKeyArn" ], "properties": { "backupAdmin": { "$ref": "#/definitions/BackupAdminConfigurations" }, "centralBackup": { "$ref": "#/definitions/CentralBackupConfigurations" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false } }, "additionalProperties": false }, "CentralBackupConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "CentralizedLogging": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false }, "configurations": { "$ref": "#/definitions/LoggingConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "LoggingConfigurations": { "type": "object", "properties": { "accessLoggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false }, "loggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" } }, "additionalProperties": false }, "OrganizationalUnit": { "type": "object", "required": [ "name" ], "properties": { "name": { "type": "string", "maxLength": 120, "minLength": 1, "pattern": "^[\\s\\S]*$", "additionalProperties": false } }, "additionalProperties": false }, "OrganizationStructure": { "type": "object", "required": [ "security" ], "properties": { "sandbox": { "$ref": "#/definitions/OrganizationalUnit" }, "security": { "$ref": "#/definitions/OrganizationalUnit" } }, "additionalProperties": false }, "S3BucketConfiguration": { "type": "object", "properties": { "retentionDays": { "type": "number", "minimum": 1, "additionalProperties": false } }, "additionalProperties": false }, "SecurityRoles": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false } } }
랜딩 존 3.3 스키마
{ "type": "object", "required": [ "centralizedLogging", "organizationStructure", "securityRoles" ], "properties": { "accessManagement": { "$ref": "#/definitions/AccessManagement" }, "backup": { "$ref": "#/definitions/Backup" }, "centralizedLogging": { "$ref": "#/definitions/CentralizedLogging" }, "governedRegions": { "type": "array", "items": { "type": "string", "maxLength": 24, "minLength": 1, "pattern": "^[a-z]{2}-[a-z\\-]*-[0-9]{1}$", "additionalProperties": false }, "additionalProperties": false }, "organizationStructure": { "$ref": "#/definitions/OrganizationStructure" }, "securityRoles": { "$ref": "#/definitions/SecurityRoles" } }, "additionalProperties": false, "definitions": { "AccessManagement": { "type": "object", "required": [ "enabled" ], "properties": { "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "Backup": { "type": "object", "properties": { "configurations": { "$ref": "#/definitions/BackupConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": false } }, "additionalProperties": false, "if": { "properties": { "enabled": { "const": true } } }, "then": { "required": [ "configurations" ] } }, "BackupAdminConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "BackupConfigurations": { "type": "object", "required": [ "backupAdmin", "centralBackup", "kmsKeyArn" ], "properties": { "backupAdmin": { "$ref": "#/definitions/BackupAdminConfigurations" }, "centralBackup": { "$ref": "#/definitions/CentralBackupConfigurations" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false } }, "additionalProperties": false }, "CentralBackupConfigurations": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false }, "CentralizedLogging": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false }, "configurations": { "$ref": "#/definitions/LoggingConfigurations" }, "enabled": { "type": "boolean", "additionalProperties": false, "default": true } }, "additionalProperties": false }, "LoggingConfigurations": { "type": "object", "properties": { "accessLoggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" }, "kmsKeyArn": { "type": "string", "maxLength": 2048, "minLength": 1, "additionalProperties": false }, "loggingBucket": { "$ref": "#/definitions/S3BucketConfiguration" } }, "additionalProperties": false }, "OrganizationalUnit": { "type": "object", "required": [ "name" ], "properties": { "name": { "type": "string", "maxLength": 120, "minLength": 1, "pattern": "^[\\s\\S]*$", "additionalProperties": false } }, "additionalProperties": false }, "OrganizationStructure": { "type": "object", "required": [ "security" ], "properties": { "sandbox": { "$ref": "#/definitions/OrganizationalUnit" }, "security": { "$ref": "#/definitions/OrganizationalUnit" } }, "additionalProperties": false }, "S3BucketConfiguration": { "type": "object", "properties": { "retentionDays": { "type": "number", "minimum": 1, "additionalProperties": false } }, "additionalProperties": false }, "SecurityRoles": { "type": "object", "required": [ "accountId" ], "properties": { "accountId": { "type": "string", "maxLength": 12, "minLength": 12, "pattern": "^\\d{12}$", "additionalProperties": false } }, "additionalProperties": false } } }
