search

awslabs / landing-zone-accelerator-on-aws

Deploy a multi-account cloud foundation to support highly-regulated workloads and complex compliance requirements.
https://aws.amazon.com/solutions/implementations/landing-zone-accelerator-on-aws/
Apache License 2.0
531 stars 421 forks source link

Organizing account and network config for large orgs #263

Open trey2001 opened 1 year ago

trey2001 commented 1 year ago

I have a set up for an org with 100+ workload accounts and have a need to organize network and account configuration as it's getting to be too large in size for a file to read and manage.

Is there a better way to organize this already? Perhaps a network config folder structure as an example where I can break the configuration out into more files? Any help is appreciated.

bo1984 commented 11 months ago

Hi @trey2001 , thank you for your feedback and utilizing the Landing Zone Accelerator on AWS solution. As of right now, we don't have immediate plans to decouple the networking config to a folder structure that you mentioned. As a workaround, if you have repeatable LAN patterns with your AWS VPCs, you want want to consider utilizing Vpc Templates as you can use the built-in deploymentTargets method to scale these out.

In terms of the accounts configuration, there is no method at the moment to better consolidate this config.

For your networking config, we do support the use of YAML anchors though to help trim down the content of your config files. I will leave this issue open should you have any other questions or concerns.