🔧 AWS Account Setup - Advanced

AWS Organizations

# Create organization
aws organizations create-organization --feature-set ALL

# Create account
aws organizations create-account \
  --email dev@example.com \
  --account-name DevAccount

# Create OU
aws organizations create-organizational-unit \
  --parent-id r-xxxx \
  --name Production

IAM Policies and Permissions

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": {"Service": "ec2.amazonaws.com"},
      "Action": "sts:AssumeRole"
    }
  ]
}

Service Control Policies (SCPs)

# Create SCP to block S3 deletions
aws organizations put-policy \
  --content file://deny-s3-delete.json \
  --description "Prevent S3 deletions" \
  --type SERVICE_CONTROL_POLICY

Key Takeaways

• **Organizations** manage multiple accounts

• **SCPs** enforce governance policies

• **Consolidated billing** simplifies accounting

• **Cross-account roles** enable access

Next Steps

Explore advanced compute and orchestration patterns.