本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# AWS Control Tower Account Factory for Terraform 的资源注意事项
<a name="aft-resources"></a>

当您使用适用于 Terraform 的 AWS Control Tower Account Factory 设置着陆区时，会在您的 AWS 账户中创建多种类型的 AWS 资源。

**搜索资源**
+ 您可以使用标签来搜索最新的 AFT 资源列表。用于进行搜索的键值对如下：

  ```
  Key: managed_by | Value: AFT
  ```
+ 对于不支持标签的组件服务，您可以通过在资源名称中搜索 `aft` 来查找资源。

**注意**  
AFT 不会在管理账户中创建任何 AWS Backup 资源。

**最初创建的资源表（按账户划分）**


**AWS Control Tower Account Factory for Terraform 管理账户**  

| **AWS service** | **资源类型** | **资源名称** | 
| --- | --- | --- | 
| AWS Identity and Access Management | 角色 | AWSAFTAdmin<br />AWSAFTExecution<br />AWSAFTService<br />ct-aft-\*<br />aft-\*<br />codebuild\_trigger\_role<br />python-layer-builder-aft-common-\* | 
| AWS Identity and Access Management | 策略 | aft-\* | 
| CodeCommit | Repositories | aft-\* | 
| CodeBuild | 构建项目 | aft-\*<br />ct-aft-\*<br />python-layer-builder-aft-common-\* | 
| 代码管道 | 管道 | *{{YourAccountId}}*-customizations-pipeline | 
| Amazon S3 | 存储桶 | aft-\* | 
| Lambda | 函数 | aft-\* | 
| Lambda | 图层 | aft-common-\* | 
| DynamoDB | 表 | aft-request<br />aft-request-audit<br />aft-request-metadata<br />aft-controltower-events | 
| Step Functions | 状态机 | aft-account-provisioning-customizations<br />aft-account-provisioning-framework<br />aft-feature-options<br />aft-invoke-customizations | 
| VPC | VPC | aft-management-vpc | 
| Amazon SNS | 主题 | aft-notifications<br />aft-failure-notifications | 
| 亚马逊 EventBridge | 事件总线 | aft-events-from-ct-management | 
| 亚马逊 EventBridge | 事件规则 | aft-account-provisioning-customizations-trigger<br />aft-account-request-codepipeline-trigger<br />aft-lambda-account-request-processor<br />aft-controltower-event-logger | 
| Key Management Service（KMS） | 客户托管密钥 | aft-backend-\*-kms-key<br />aft | 
| AWS Systems Manager | Parameter Store | /aft/\* | 
| Amazon SQS | 队列 | aft-account-request.fifo<br />aft-account-request-dlg.fifo | 
| CloudWatch | 日志组 | /aws/\*/ct-aft-\*<br />/aws/\*/aft-\*<br />/aws/codebuild/python-layer-builder-aft-common-\* | 
| AWS Backup | 保管库 | aft-controltower-backup-vault | 
| AWS Backup | 计划 | aft-controltower-backup-plan | 
| AWS Support Center（可选） | Support 计划 | Enterprise | 


**AWS 通过 AWS Control Tower Account Factory 为 Terraform 配置的账户**  

| **AWS service** | **资源类型** | **资源名称** | 
| --- | --- | --- | 
| AWS Identity and Access Management | 角色 | AWSAFTExecution | 
| AWS Support Center（可选） | Support 计划 | Enterprise | 


**AWS Control Tower 管理账户**  

| **AWS service** | **资源类型** | **资源名称** | 
| --- | --- | --- | 
| AWS Identity and Access Management | 角色 | AWSAFTExecution<br />AWSAFTService<br />aft-controltower-events-rule | 
| AWS Systems Manager | Parameter Store | /aft/\* | 
| EventBridge | 事件规则 | aft-capture-ct-events | 
| CloudTrail （可选） | 跟踪 | aws-aft-CustomizationsCloudTrail | 
| AWS Support Center（可选） | Support 计划 | Enterprise | 


**AWS Control Tower 日志存档账户**  

| **AWS service** | **资源类型** | **资源名称** | 
| --- | --- | --- | 
| AWS Identity and Access Management | 角色 | AWSAFTExecution<br />AWSAFTService | 
| Key Management Service（KMS） | 客户托管密钥 | aft | 
| Amazon S3 | 存储桶 | aws-aft-logs-\*<br />aws-aft-s3-access-logs-\* | 
| AWS Support Center（可选） | Support 计划 | Enterprise | 


**AWS Control Tower 审计账户**  

| **AWS service** | **资源类型** | **资源名称** | 
| --- | --- | --- | 
| AWS Identity and Access Management | 角色 | AWSAFTExecution<br />AWSAFTService | 
| AWS Support Center（可选） | Support 计划 | Enterprise |