AWS CDK Landing Zone

Guides

Task-oriented walkthroughs for common AWS CDK Landing Zone operations, including adding accounts, creating SCPs, customizing StackSets, and setting up CI/CD.

Step-by-step guides for the most common landing zone operations. Each guide focuses on a single task: which files to edit, which commands to run, and how to verify the result.

Available guides

GuideWhen to use it
Add an AccountYou need a new AWS account in an existing OU
Add an Organizational UnitYou need a new OU with its own SCPs and StackSet targeting
Create a Custom SCPYou want to author and attach a new Service Control Policy
Customize StackSetsYou need to enable, disable, or retarget a StackSet
GitHub Actions DeploymentYou want to understand or modify the OIDC-based CI/CD pipeline
Updating VersionsYou want to pull in new landing zone releases by bumping package versions

The Configuration section covers every customer-editable file in detail, and the Reference section covers what each component deploys.