advanced~2h

AWS Organizations & Service Control Policies

Managing many AWS accounts as one organization — centralized billing, and Service Control Policies that set permission guardrails no IAM policy within a member account can override.

1
Subtopics

🎓 Learning objectives

  • Explain why companies use multiple AWS accounts instead of one
  • Explain what a Service Control Policy does and how it differs from an IAM policy
  • Explain the role of Organizational Units in structuring an AWS Organization
  • Explain what AWS Control Tower adds on top of Organizations

AWS Organizations & Service Control Policies is a Pro topic

Sign in, then upgrade to Pro or Power to unlock this topic and the full AWS curriculum.

📂 Subtopics

Related concepts

iam-fundamentalscloudtrail-configcost-management

Next Step

Continue to ACM, STS & CloudHSM