Trusted Access for Account Management on AWS

ACM.394 Account Management in AWS Organizations

Teri Radichel
Cloud Security
Published in
7 min readNov 21, 2023

--

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

⚙️ Check out my series on Automating Cybersecurity Metrics | Code.

🔒 Related Stories: AWS Organizations | IAM | Deploying a Static Website

💻 Free Content on Jobs in Cybersecurity | ✉️ Sign up for the Email List

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In the last post I created a new root-orgadmin account for performing actions you would normally take in the root management account, but from an account to which AWS Service Control Policies Apply.

In this post I’m going to see if I can clean up some accounts I started to create but realized the naming, roles, or emails were off and wanted to start over.

When you are trying to manage accounts in AWS things can get into states that you just want to ditch and start over when you are testing creating and renaming accounts. Sometime you just want to delete the account but deleting accounts on AWS is a whole painful process of getting into the account with the root email, adding a credit card for some…

--

--

Teri Radichel
Cloud Security

CEO 2nd Sight Lab | Penetration Testing & Assessments | AWS Hero | Masters of Infosec & Software Engineering | GSE 240 etc | IANS | SANS Difference Makers Award