By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Maintain Uniformity in AWS member accounts without access to their resources

0

How can a management account setup the architecture in AWS member accounts without having the access to the resources in member AWS accounts.

The management account want to maintain updates in the architecture in AWS member accounts from time to time but, it should not be able to make any calls in the member accounts or access any resources. Also, the member acccounts need to have an User Interface which is accessible by only them.

Can there be a way to maintain centralized repository for the architecture

Topics
Security, Identity, & ComplianceFront-End Web & MobileManagement & Governance
Tags
Security, Identity, & ComplianceAWS AmplifyAWS CloudFormationAWS Organizations
Language
English
Keerthi
asked 7 days ago211 views
1 Answer
0

In AWS, the management account can handle administrative tasks and policies and member accounts can be delegated responsibilities. Remember access to member accounts can be managed using the OrganizationAccountAccessRole IAM role.

You can then use S3 as a centralized repository managing all the permissions as needed.

profile picture
EXPERT
Giovanni Lauria
answered 7 days ago

Relevant content