Management & Governance - AWS Organization

Question 1

Purpose

Answer 1

Central governance and management across AWS accounts

Question 2

Use Case

Answer 2

you can consolidate multiple AWS accounts into an organization that you create and centrally manage. simplify billing by using a single payment method for all of your accounts.

Question 3

Access

Answer 3

AWS Management Console; You can also use the AWS CLI (for command-line access) or SDKs to perform the same steps to create a new organization.

Question 4

Availability

Answer 4

AWS Organizations is available in all AWS commercial regions, AWS GovCloud (US) regions, and China regions The service endpoints for AWS Organizations are located in US East (N. Virginia) for commercial organizations and AWS GovCloud (US-West) for AWS GovCloud (US) organizations, and AWS China (Ningxia) region, operated by NWCD.

Question 5

Billing

Answer 5

The owner of the management account is responsible for paying for all usage, data, and resources used by the accounts in the organization.

Question 6

Competition

Answer 6

AWS Control Tower, AWS Control Tower offers an abstracted, automated, and prescriptive experience on top of AWS Organizations. It automatically sets up AWS Organizations as the underlying AWS service to organize accounts and implements preventive guardrails using SCPs.

Question 7

What is an organization

Answer 7

An organization is a collection of AWS accounts that you can organize into a hierarchy and manage centrally.

Question 8

What is an OU?

Answer 8

An organizational unit (OU) is a group of AWS accounts within an organization. An OU can also contain other OUs enabling you to create a hierarchy.

Question 9

What is a Service Control Policy?

Answer 9

are a type of organization policy that you can use to manage permissions in your organization. Service Control Policies (SCPs) allow you to control which AWS service actions are accessible to principals (account root, IAM users, and IAM roles) in the accounts of your organization. organization.

Question 10

What does an SCP look like?

Answer 10

SCPs follow the same rules and grammar as IAM policies. 
{ 
 "Version":"2012-10-17", 
 "Statement":[ 
 { 
 "Effect":"Allow", 
 "Action":["EC2:*","S3:*"], 
 "Resource":"*" 
 } 
 ] 
 }

Question 11

SCP recommendations?

Answer 11

AWS strongly recommends that you don’t attach SCPs to the root of your organization without thoroughly testing the impact that the policy has on accounts.