CuraDevOps

Plan archived

AWS AFT auto re-applies customizations on account OU moves

  • Platform/SRE — Plan: Teams using AFT to manage multi-account AWS environments should evaluate enabling aft_customization_triggers = ["account_move"] this quarter to eliminate manual re-application steps and reduce compliance drift when accounts change OUs. No deadline, but the tighter logging bucket controls and enterprise-scale improvements are also worth reviewing alongside the opt-in.
  • CI/CD — Skip
  • Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment (CISA KEV / EPSS / public PoC). Verify against the original source before acting. Found a bad verdict? Report it — confirmed errors go to the corrections log.