Section 5: Organisations & Control Tower

Question 1

What is AWS Organizations

Answer 1

AWS Organizations allows to to have one organisation for many AWS accounts

Allows to have 1 bill and allows goverence across all accounts (centrally manage all accounts)

https://docs.aws.amazon.com/organizations/latest/userguide/orgs_introduction.html

Question 2

What is a Service Control Policy?

Answer 2

A Service Control Policy is a JSON file which controls permissions. This can be applied to orgnisations, stating for example what resources they have access to using. This file is added/uploaded to AWS.

Question 3

What is AWS Control Tower?

Answer 3

AWS Control Tower sits above AWS Orgnisations. It create a well-architected multi-account based on best practices (known as a landing zone). Guardrails are used for governance and compliance.

Question 4

What are the two feature sets AWS Organizations is available in?

Answer 4

The two feature sets AWS Organizations are:

• Consolidated billing
• All features

https://digitalcloud.training/aws-organizations/