Notes / AWS

AWS

Running AWS well day to day: accounts and guardrails that scale, tags and policies that keep it tidy, networks and identities locked down, EC2, backups and monitoring that hold up, and a bill that stays under control. 10 guides and 8 PowerShell scripts.

How AWS is organised

Organization policies attached at one level apply to every account beneath it. The account is the main security and billing boundary.

  1. OrganizationManagement account, consolidated billing
  2. Organizational unitsSCPs and policies at scale
  3. AccountsSecurity, billing and quota boundary
  4. Regions and VPCsWhere resources run
  5. ResourcesGrouped by tags