AWS Organizations - Part I

 

AWS Organization – Manage multiple accounts. Central account to manage multiple accounts.

Billing is managed on a central account (Management/Master/root Account) instead of multiple accounts.

Consolidate billing – One bill for all the accounts in the organization.

Management account is the root of the hierarchy.

Grouping of accounts into OU (Organization Units).

Login with your root account to create an Organization.

Your root account is called "Management Account".

1) We can add a new AWS account - Need a unique email ID not used in AWS before.

2) Add an existing AWS account - Send mail invitation.

Let's see how to add a new account:

I am creating an account by the name “Development”. Email ID should be unique and must not be mapped to any other AWS Account. IAM role for this account.

NOTE: The IAM role that is created will have FULL ACCESS on the new account.

I repeated the same process to create a DEVELOPMENT and PRODUCTION account.

So, I have 3 accounts:

1) Management account.

2) Development account.

3) Production account.

Now the new accounts are under the root account (Management account).

We can create a separate OU and move the accounts under them.

Creating an OU called “Development” and “Production” and moving the accounts accordingly.

Click on the “root” -> Action -> Create new.

OU can contain both accounts and other OU’s. The structure has a root at the top and branches of OUs that reach down. The branches end in accounts that act as the leaves of the tree.

Now, let’s move the development account under development OU.

Once you move the accounts to the respective OU, it will appear like this.

In the next chapter, we will see how to switch accounts.