118. The landing zone: Managing multiple AWS accounts
AWS Bites
In this episode, we provide an introductory overview of AWS's best practices for managing infrastructure using multiple accounts under an organization. We discuss the advantages of this approach and how to get started creating your own multi-account environment, or "landing zone".
💰 SPONSORS 💰
AWS Bites is brought to you by fourTheorem, an AWS Partner that does CLOUD stuff well, including helping you set up your AWS organisation! If that’s something you are looking for, go to fourtheorem.com to read more about us and to get in touch!
🔖 Chapters:
00:00 Intro 01:24 What is a Landing Zone? 01:58 The advantages of having multiple AWS accounts 07:10 What are the benefits for an individual who isn't leveraging AWS extensively? 10:06 How to organise AWS accounts effectively? 14:54 AWS Services and tools that you can use to set up your organisation (AWS Organizations, IAM Identity Center, and Control Tower) 18:12 Tools to manage accounts and organisations using Infrastructure as Code (IaC) 22:56 Tools to get temporary programmatic access (Granted, Leapp, CloudGlance, etc) 24:38 Summary and wrap up
In this episode, we mentioned the following resources:
- AWS Definition of Landing Zone: https://docs.aws.amazon.com/prescriptive-guidance/latest/strategy-migration/aws-landing-zone.html
- Series of articles "Managing AWS accounts like a PRO": https://fourtheorem.com/managing-aws-accounts-part-1/
- AWS Organizations service: https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html
- IAM Identity Center service: https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html
- Control Tower: https://docs.aws.amazon.com/controltower/latest/userguide/what-is-control-tower.html
- org-formation: https://github.com/org-formation/org-formation-cli
- Our previous episode "AWS Governance and landing zone with Control Tower, OrgFormation and Terraform": https://awsbites.com/96-aws-governance-and-landing-zone-with-control-tower-org-formation-and-terraform
- granted.dev: https://granted.dev
- AWS SSO util: https://github.com/benkehoe/aws-sso-util
- Leapp: https://www.leapp.cloud/
- Cloud Glance: https://cloudglance.dev/
You can listen to AWS Bites wherever you get your podcasts:
- Apple Podcasts: https://podcasts.apple.com/us/podcast/aws-bites/id1585489017
- Spotify: https://open.spotify.com/show/3Lh7PzqBFV6yt5WsTAmO5q
- Google: https://podcasts.google.com/feed/aHR0cHM6Ly9hbmNob3IuZm0vcy82YTMzMTJhMC9wb2RjYXN0L3Jzcw==
- Breaker: https://www.breaker.audio/aws-bites
- RSS: ​​https://anchor.fm/s/6a3312a0/podcast/rss
Do you have any AWS questions you would like us to address? Leave a comment here or connect with us on X, formerly Twitter:
#AWS #organization #security #IAM #login #credentials #landingzone ... https://www.youtube.com/watch?v=TVJzAto9DGM
229142670 Bytes