Core concept

L1 = 1:1 CF. L2 = opinionated defaults. L3 = patterns (VPC + subnets + NAT preconfigured). Higher = less code.

Advertisement

How it works

Debugging generated CF harder. Sometimes need to drop to L1 for specific config. Steeper learning curve than Terraform for some.

Advertisement

Trade-offs + gotchas

Teams comfortable with code. Complex conditional logic in IaC. AWS-first orgs. Aspects for cross-cutting concerns.