Planning your next steps

There are still plenty of things worth trying out when working with AWS Organizations. Here are a few recommendations for the same:

First up, as a best practice, you should always monitor your individual organizations and make sure that each change is tracked and reported. You can leverage both AWS CloudTrail as well as AWS CloudWatch events to accomplish the same. Monitoring the organizations is essential as it helps you to ensure that no unwanted changes affect the compliance of your accounts and environments. You can read up more on how you can leverage AWS CloudTrail and AWS CloudWatch events for monitoring organizations at https://docs.aws.amazon.com/organizations/latest/userguide/orgs_monitoring.html.

Next up, I would also recommend that you try out the AWS provided end-to-end account creation process here:

https://aws.amazon.com/blogs/security/how-to-use-aws-organizations-to-automate-end-to-end-account-creation/

The overall process for automating the account creation is very similar to the CLI commands that we executed a while back. The script accepts a few variables that are required to be defined first along with a few customizations of role names. Once done, you simply execute the shell script, which in turn calls a CloudFormation template to create and configure the new member account.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset