Interesting! Technically I guess a lot of that is possible with raw CDK (centralized logging would be, for instance, if you created appropriate roles for each o

Interesting! Technically I guess a lot of that is possible with raw CDK (centralized logging would be, for instance, if you created appropriate roles for each of the managed accounts), but it never hurts to have it done for you automatically! Sounds like it provides sensible default templates for things you _could_ roll by hand if you were feeling masochistic :) Plus, as the sibling comment said, it predated CDK so was probably the only option at the time.