

本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。

# 带和不带功能的功能比较 AWS Config 集成
<a name="config-integration-feature-comparison"></a>

 在着陆区 4.0 中，您可以禁用集 AWS Config 成。下表汇总了在着陆区启用和未启用 AWS Config 集成的情况下可用的 AWS Control Tower 功能。


| 功能 | AWS Config 已启用集成 | AWS Config 集成已禁用 | 
| --- | --- | --- | 
| [预防性控制](https://docs.aws.amazon.com//controltower/latest/controlreference/preventive-controls.html) | ✓ | ✓ | 
| [主动控制](https://docs.aws.amazon.com//controltower/latest/controlreference/proactive-controls.html) | ✓ | ✓ | 
| [应用于 OU 的区域拒绝控制](https://docs.aws.amazon.com//controltower/latest/controlreference/ou-region-deny.html) | ✓ | ✓ | 
| [区域拒绝控制应用于着陆区](https://docs.aws.amazon.com//controltower/latest/userguide/region-deny.html) | ✓ |  | 
| [侦测性控制](https://docs.aws.amazon.com//controltower/latest/controlreference/detective-controls.html) | ✓ |  | 
| [账户工厂](https://docs.aws.amazon.com//controltower/latest/userguide/account-factory.html) | ✓ | 查看替代方案 | 
| [Account Factory for Terraform (AFT)](https://docs.aws.amazon.com//controltower/latest/userguide/aft-overview.html) | ✓ |  | 
| [Account Factory 定制 (AFC)](https://docs.aws.amazon.com//controltower/latest/userguide/af-customization-page.html) | ✓ |  | 
| [AWS Service Catalog 与[账户 Fac](https://docs.aws.amazon.com//controltower/latest/userguide/account-factory.html) tory 集成](https://docs.aws.amazon.com//controltower/latest/userguide/service-catalog.html) | ✓ |  | 
| [AWS Control Tower (cfcT) 的自定义设置](https://docs.aws.amazon.com//controltower/latest/userguide/cfct-customizations-dev-guide.html) | ✓ |  | 
| [应用于 OU 的基准](https://docs.aws.amazon.com//controltower/latest/userguide/types-of-baselines.html#ou-baseline-types) | ✓ |  | 
| [AWS CloudTrail 集成和基准](https://docs.aws.amazon.com//controltower/latest/userguide/cloudtrail.html) | ✓ | ✓ | 
| [AWS Backup 集成和基准](https://docs.aws.amazon.com//controltower/latest/userguide/with-backup.html) | ✓ |  | 
| [AWS IAM 身份中心集成和基准](https://docs.aws.amazon.com//controltower/latest/userguide/sso.html) | ✓ |  | 
| [与偏差通知的 AWS SNS 集成](https://docs.aws.amazon.com//controltower/latest/userguide/sns.html) | ✓ |  | 
| [Amazon EventBridge 集成偏移通知](https://docs.aws.amazon.com//controltower/latest/userguide/governance-drift.html#eventbridge-creation) | ✓ | ✓ | 
| [注册 OU](https://docs.aws.amazon.com//controltower/latest/userguide/importing-existing.html) | ✓ | 查看替代方案 | 

 **替代方案** 

 <a name="config-integration-disabled-alternative-af"></a>**账户工厂** 

 如果您禁用了 AWS Config 集成，则可以启用[自动注册](https://docs.aws.amazon.com//controltower/latest/userguide/account-auto-enrollment.html)并使用 AWS Organizations 来创建和移动帐户。这些账户将继承应用于父 OU 的控件。

 <a name="config-integration-disabled-alternative-register-ou"></a>**注册 OU** 

 如果您禁用了 AWS Config 集成，则可以使用 AWS Organizations 创建 OU。然后，通过 AWS Control Tower 控制台中的控制目录页面启用控件，在组织页面上重置控件，或者使用 AWS Control Tower API。