AWS RAM (Resource Access Manager)

AWS Organizations - Amazon Web ServicesAmazon Web Services, Inc.

• Organizing Your AWS Environment Using Multiple Accounts AWS Whitepaper

• AWS Architecture Blog - Category: Resource Access Manager (RAM)

  • Deploy consistent DNS with AWS Service Catalog and AWS Control Tower customizations

Multi-account manage strategy

use 1 gmail account, have multiple AWS organization account that have individual password.

1. make google account for root account

   1. let's imagine your account is [e-mail]

2. login to AWS console

3. AWS Organizations tab

4. click 'AWS Account' -> 'Add an AWS Account'

5. if your root email address is '[e-mail]' then invite like this

   1. '[e-mail]'

   2. '[e-mail]'

6. after then try to login use '[e-mail]' and click 'forgot the password' and change the password

7. same for '[e-mail]'

8. then you will have three individual AWS account that have different password but you don't have to expose '[e-mail]' gmail account password to who use '+account1', '+account2'