For scenarios with static accounts and few changes, the script approach is sufficient and has the lowest maintenance cost; for scenarios with continuously added accounts and frequent authorization adjustments, the CDK event-driven approach can avoid repeated rework and is more worry-free in the long run; during the transition period, you can first use scripts to clean up the existing accounts, then gradually bring new accounts into the automated pipeline.