What is AWS Cloud? AWS Global Infrastructure AWS Shared Responsibility Model AWS Well-Architected Framework AWS Compute Services Overview Amazon EC2 Fundamentals AWS Storage Services Amazon S3 Object Storage AWS Networking VPC Fundamentals AWS IAM Identity Access Management AWS Pricing and Billing Amazon RDS Managed Database Amazon VPC Peering and Endpoints Elastic Load Balancing ELB Amazon CloudWatch Monitoring AWS Auto Scaling Amazon Route 53 DNS AWS CloudFormation Infrastructure AWS Lambda Serverless Amazon DynamoDB NoSQL Amazon ElastiCache Redis Memcached AWS CloudFront CDN Amazon SQS SNS Messaging AWS Organizations SCPs AWS Config Compliance AWS Systems Manager Amazon GuardDuty Threat Detection AWS Shield DDoS Protection AWS Key Management Service KMS AWS Support Plans SLA

Back to Lessons

AWS Organizations SCPs

April 5, 2026

Multi-Account Management

Centralized governance across thousands of AWS accounts.

Organizations Structure

Organization:
- Management Account (payer)
- Organizational Units (OUs)
- Accounts (production/dev/security)

Service Control Policies (SCPs):
- Deny specific actions (no-root, no-public-s3)
- Guardrails (prevent deletion)
- Mandatory tags enforcement
- Regional restrictions

Consolidated Billing:
- Volume discounts across accounts
- Single payment method

Best Practices

Separate environments (prod/dev/test)
Security tooling account
Log archive account
Workshop accounts (sandbox)

Previous Lesson Next Lesson