Introducing AWS Organizations
As was mentioned earlier, AWS Organizations is an account management service. Its role is to help large and complex organizations handle their AWS environment more efficiently. You can use AWS Organizations to manage security policies across accounts and filter out unwanted access, automate the creation of new accounts through its application programming interfaces (APIs), organize accounts into OUs, and consolidate billing across multiple accounts.
When you set up an organization with AWS Organizations, the AWS account that you use to set it up becomes the management account of that organization. As you invite other accounts to join your organization or directly create new accounts in your organization, these accounts then become member accounts.
There are two major modes of working with AWS Organizations: either with all features enabled or with consolidated billing only. Consolidated billing only provides a central consolidated bill of all the...