Designing a Multi-Account AWS Environment for Complex Organizations
Determining a strategy to deploy your resources across multiple Amazon Web Services (AWS) accounts is essential for governance purposes. This can bring benefits not just for billing but also for security and compliance purposes.
This chapter will explain how to organize your resources using multiple AWS accounts for your organization. We will discuss how to approach billing and resource isolation and how to increase security across an entire organization or individual business units (BUs). You will also examine the various services that AWS provides to assist you with that.
The following main topics will be covered in this chapter:
- Deciding on resource and billing isolation
- Establishing a billing strategy for multiple accounts
- Introducing AWS Organizations
- Setting up service control policies (SCPs)
- Leveraging AWS Control Tower
The first section of this chapter will discuss the importance...
