

本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。

# 具有和不具有 AWS Config 整合的功能比較
<a name="config-integration-feature-comparison"></a>

 使用登陸區域 4.0，您可以停用 AWS Config 整合。下表摘要說明 AWS Control Tower 功能，可在登陸區域 AWS Config 啟用整合的情況下使用。


| 功能 | AWS Config 啟用整合 | AWS Config 已停用整合 | 
| --- | --- | --- | 
| [預防性控制](https://docs.aws.amazon.com//controltower/latest/controlreference/preventive-controls.html) | ✓ | ✓ | 
| [主動性控制](https://docs.aws.amazon.com//controltower/latest/controlreference/proactive-controls.html) | ✓ | ✓ | 
| [套用至 OUs 的區域拒絕控制](https://docs.aws.amazon.com//controltower/latest/controlreference/ou-region-deny.html) | ✓ | ✓ | 
| [套用至登陸區域的區域拒絕控制](https://docs.aws.amazon.com//controltower/latest/userguide/region-deny.html) | ✓ |  | 
| [偵測性控制](https://docs.aws.amazon.com//controltower/latest/controlreference/detective-controls.html) | ✓ |  | 
| [帳戶工廠](https://docs.aws.amazon.com//controltower/latest/userguide/account-factory.html) | ✓ | 請參閱替代方案 | 
| [Terraform (AFT) 的帳戶工廠](https://docs.aws.amazon.com//controltower/latest/userguide/aft-overview.html) | ✓ |  | 
| [帳戶工廠自訂 (AFC)](https://docs.aws.amazon.com//controltower/latest/userguide/af-customization-page.html) | ✓ |  | 
| [AWS Service Catalog 與 Account Factory 整合](https://docs.aws.amazon.com//controltower/latest/userguide/service-catalog.html) [https://docs.aws.amazon.com//controltower/latest/userguide/account-factory.html](https://docs.aws.amazon.com//controltower/latest/userguide/account-factory.html) | ✓ |  | 
| [AWS Control Tower (CfCT) 的自訂](https://docs.aws.amazon.com//controltower/latest/userguide/cfct-customizations-dev-guide.html) | ✓ |  | 
| [套用至 OUs基準](https://docs.aws.amazon.com//controltower/latest/userguide/types-of-baselines.html#ou-baseline-types) | ✓ |  | 
| [AWS CloudTrail 整合和基準](https://docs.aws.amazon.com//controltower/latest/userguide/cloudtrail.html) | ✓ | ✓ | 
| [AWS Backup 整合和基準](https://docs.aws.amazon.com//controltower/latest/userguide/with-backup.html) | ✓ |  | 
| [AWS IAM Identity Center 整合和基準](https://docs.aws.amazon.com//controltower/latest/userguide/sso.html) | ✓ |  | 
| [漂移通知的 AWS SNS 整合](https://docs.aws.amazon.com//controltower/latest/userguide/sns.html) | ✓ |  | 
| [用於偏離通知的 Amazon EventBridge 整合](https://docs.aws.amazon.com//controltower/latest/userguide/governance-drift.html#eventbridge-creation) | ✓ | ✓ | 
| [註冊 OU](https://docs.aws.amazon.com//controltower/latest/userguide/importing-existing.html) | ✓ | 請參閱替代方案 | 

 **替代方案** 

 <a name="config-integration-disabled-alternative-af"></a>**帳戶工廠** 

 如果您已停用 AWS Config 整合，您可以啟用[自動註冊並使用 ](https://docs.aws.amazon.com//controltower/latest/userguide/account-auto-enrollment.html) AWS Organizations 來建立和移動帳戶。帳戶會繼承套用至父 OU 的控制項。

 <a name="config-integration-disabled-alternative-register-ou"></a>**註冊 OU** 

 如果您已停用 AWS Config 整合，您可以使用 AWS Organizations 來建立 OUs。然後，透過 AWS Control Tower 主控台的 Control Catalog 頁面啟用控制項、在 Organization 頁面上重設控制項，或使用 AWS Control Tower APIs。