Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An AWS account just for getting into other AWS accounts

src-bin.com

Post reply on HN
Print view View original

11–20 of 109 posts

Re: An AWS account just for getting into other AWS accounts

#11

Post by chronotis »

benatkin wrote: post #6
metadat wrote: post #4

Earlier quoted context omitted.

Mr. Crowley, did you forget to mention / disclose your association and financial interest tied to this product? For context, https://www.linkedin.com/in/richarddcrowley indicates he works there.

It's a bit different of a situation from the usual product recommendations because the domain of the article and link in the comment is the same.

Seems relevant to me. The article is from your organization, and that information is something I wouldn't have known if not for the prior commenter's comment.

Re: An AWS account just for getting into other AWS accounts

#13

Post by hatware »

metadat wrote: post #4
rcrowley wrote: post #3

Earlier quoted context omitted.

In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.

Mr. Crowley, did you forget to mention / disclose your association and financial interest tied to this product? For context, https://www.linkedin.com/in/richarddcrowley indicates he works there.

What a weird comment.

Re: An AWS account just for getting into other AWS accounts

#14

Post by dmak »

flyinprogrammer wrote: post #2

https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.

I looked at the landing page, but don't really understand when I would use this. Could you give a few examples of why this is useful?

Re: An AWS account just for getting into other AWS accounts

#15

Post by reilly3000 »

benatkin wrote: post #9

What's this like on Google Cloud? Would you create a project to get into other projects and would that achieve most of what this achieves? And would you use a GSuite address so you don't log into the console just by logging into the email?

Everything in GCP is built atop the Google Auth system and tied to a GSuite domain. It’s Org->Folder->Project hierarchy is very similar to AWS Orgs. However, it’s far easier from there. IAM is tied to your gsuite email, and service accounts are also email addresses. One never needs to login with different creds to access another project. You just use your Google login or activate a service account. Projects are a really flexible abstraction. My company has one for every stage for every team plus specialized projects for net/VPC, GCR, logs, etc, hundreds in total. We’re about halfway through the F500 list. Projects are a nice abstraction and getting the setup OP described is a lot more idiomatic to GCP.

Re: An AWS account just for getting into other AWS accounts

#17

Post by judge2020 »

benatkin wrote: post #9

What's this like on Google Cloud? Would you create a project to get into other projects and would that achieve most of what this achieves? And would you use a GSuite address so you don't log into the console just by logging into the email?

For enterprises it seems this is already baked-in, ie. when you're a Google Workspace (previously GSuite) user, your project selector has an inherent hierarchy stemming from the domain, ie. example.com -> project1, project2, etc. and, in my limited experience, switching between accounts on the command line is pretty good. But this article still makes a good point about keeping different environments in different siloed projects.

Re: An AWS account just for getting into other AWS accounts

#18

Post by rcrowley »

metadat wrote: post #4
rcrowley wrote: post #3

Earlier quoted context omitted.

In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.

Mr. Crowley, did you forget to mention / disclose your association and financial interest tied to this product? For context, https://www.linkedin.com/in/richarddcrowley indicates he works there.

The same link’s in the second sentence of the article. But, sure, I forgot.

Re: An AWS account just for getting into other AWS accounts

#19

Post by icedchai »

jagged-chisel wrote: post #12
pkrumins wrote: post #10

I have 1 AWS account for everything and th

Is this humor? I honestly can’t tell.

It's tough to say. The last company I worked for (a self-described "unicorn") literally used one AWS account for everything: dev, test, and prod.

Re: An AWS account just for getting into other AWS accounts

#20

Post by rcrowley »

medina wrote: post #16

Re-discovering Active Directory Enhanced Security Administrative Environment (ESAE) / Red Forest design, in cloud :-)

Honestly, having lived a parallel life to the Windows ecosystem, TIL about “red forest.” I do think, though, that cross-account AWS actions are much more first-class than it sounds like jumping between forests ever was.
Post reply on HN