All 7 AWS Organizations & Multi Account Strategy questions
More in AWS Organizations & Multi Account Strategy
What is AWS Organizations and what benefits does it provide for managing multiple AWS accounts? Why do organizations commonly adopt a multi account strategy instead of running all workloads within a single AWS account? What are Service Control Policies, and how do they enforce security and compliance guardrails across an entire organization? What is the AWS Landing Zone or AWS Control Tower, and how does it help set up a well architected multi account environment quickly? How can cross account IAM roles enable secure resource sharing and centralized management across accounts within an organization? How should an organization design its overall account structure and governance model to balance security isolation with developer agility and operational efficiency?
Advertisement
AWS › AWS Organizations & Multi Account Strategy

What are Organizational Units in AWS Organizations, and how do they help structure a large number of accounts logically?

Intermediate

Answer

Organizational Units, commonly called OUs, let you group related accounts together into a hierarchical structure, such as grouping all production accounts under one OU and all development accounts under another, and this structure is important because policies like service control policies can be applied at the OU level, automatically affecting every account within that group, making it much easier to manage governance consistently across many accounts that share similar requirements.
aws organizations create-organizational-unit --parent-id r-abc123 --name 'Production'
Real-world example A large enterprise organizes its fifty AWS accounts into a Production OU, a Development OU, and a Sandbox OU, then applies a stricter service control policy to the Production OU alone, without needing to configure that same restriction individually on each production account.

Common follow-ups: Can Organizational Units be nested within other Organizational Units?;How do you decide the right grouping structure for organizational units?

IAM;Tagging Strategies & Resource Management
All 7 AWS Organizations & Multi Account Strategy questions