AWS Decision Engine
/
Governance & Multi-Account
/
Question
Learn
Memory
Practice
Field Ops
|
Login
Register
Governance & Multi-Account Architecture Decision Tree
What governance problem are you solving?
Manage many AWS accounts centrally — billing consolidation, policy application, and account lifecycle
Restrict permissions across all accounts in the organization — deny actions regardless of IAM policies
Set up a governed multi-account environment with automated guardrails and account vending
Centralize workforce identity and SSO so users access multiple accounts with one set of credentials
Share AWS resources such as VPC subnets or Transit Gateways across accounts without duplicating them
Allow programmatic or pipeline-based secure cross-account access via STS AssumeRole
Design account structure and hierarchy — group accounts by environment, workload, or business unit
Create a baseline enterprise AWS environment with foundational accounts before workloads arrive
Aggregate audit and security logs centrally from all accounts into an immutable archive
Host shared network, security, and tooling services consumed by all workload accounts
← Start Over