AWS CDK Landing Zone

Configuration

All customer-editable configuration for the AWS CDK Landing Zone, covering settings, organization structure, SCPs, contacts, and version management.

All landing zone configuration lives in src/config/ in your starter repo. These are the only files you need to edit to customize the landing zone for your organization; the reusable implementation stays in the versioned packages.

Important: After changing landing-zone-settings.ts, always re-run pnpm exec projen to regenerate the npm scripts and GitHub Actions workflow with the updated account ID and region.

Configuration files

FileWhat it controls
Landing Zone SettingsOrganization name, mail domain, management account ID, deployment regions, and optional features
Organization StructureOUs, accounts, and SCP attachments for your AWS Organization
Service Control PoliciesShipped guardrails and how to author custom SCPs
Alternate ContactsSecurity, billing, and operations contacts applied to every account