Defaults
The Data Landing Zone provides opinionated yet configurable setups by offering optional defaults for various parts of the configuration. These defaults help streamline setup while remaining adaptable to specific requirements.
Example: Using Defaults in Budgets
An example of applying defaults is demonstrated in the Budgets
component, where the Defaults.budgets
object is used to create two standard budgets.
Below is a code snippet illustrating how to configure a budget of $100 for the entire organization and $20 for resources created by the DLZ:
List of Defaults
A comprehensive list of defaults referenced throughout the documentation:
- Defaults.denyServiceList: Creates two budgets, one for the organization
- Defaults.budgets: Creates two budgets, one for the organization and another for the DLZ-managed resources.
- Defaults.vpcClassB3Private3Public: Creates a VPC with three public and three
private subnets in the
eu-west-1
region. - Defaults.denyServiceList: Creates a list of services that should be denied by default.
- Defaults.rootControls: Specifies a list of commonly used Control Tower Controls based on best practices and data management.
- Defaults.iamIdentityCenterPermissionSets function creates two permission
sets,
AdministratorAccess
andReadOnlyAccess
from the respective AWS managed policies.