Search

Lessons (3)

• Multi-Account Strategy, Governance and Security Operations

  Organize accounts with Organizations and Control Tower, enforce guardrails with SCPs, and detect threats with CloudTrail, Config and …

• IAM Deep Dive: Policy Evaluation, STS and Cross-Account Access

  … D -- yes X[DENIED] D -- no S{Organizations SCP allows it?} S -- no X S -- yes B{Permission …

• Cost Optimization and the Well-Architected Framework

  … Enforce with tag policies and SCPs. Pricing models Model Discount Commitment Best for --- --- --- --- On-demand None None Unpredictable …