An AWS account just for getting into other AWS accounts
1–10 of 109 posts
Re: An AWS account just for getting into other AWS accounts
#2https://aws.amazon.com/controltower/
If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.
Re: An AWS account just for getting into other AWS accounts
#3https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.
In the meantime, check out Substrate https://src-bin.com/substrate/> and don’t worry about waiting for AWS to improve.
Re: An AWS account just for getting into other AWS accounts
#4https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.
In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.
Mr. Crowley, did you forget to mention / disclose your association and financial interest tied to this product?
For context, https://www.linkedin.com/in/richarddcrowley indicates he works there.
Re: An AWS account just for getting into other AWS accounts
#5https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.
If config can go this long with half-assed implementation I don’t see why control tower is going to fare better with more adoption. Most large enterprises are going to want to roll their own anyway.
Re: An AWS account just for getting into other AWS accounts
#6Earlier quoted context omitted.
In the meantime, check out Substrate https://src-bin.com/substrate/ > and don’t worry about waiting for AWS to improve.
Mr. Crowley, did you forget to mention / disclose your association and financial interest tied to this product? For context, https://www.linkedin.com/in/richarddcrowley indicates he works there.
It's a bit different of a situation from the usual product recommendations because the domain of the article and link in the comment is the same.
Re: An AWS account just for getting into other AWS accounts
#7https://aws.amazon.com/controltower/ If we all started using Control Tower perhaps they'd get funded enough to continue to build it out and make it awesome.
The guy or gal that's been working on it the last two years has slowly been working through my bucket list.
If I can just get guardrails that configure the basic AWS security foundation stuff like password policies, I'll be satisfied. And oddly enough, the CloudFormation coverage for this stuff is abysmal. We don't even allow IAM users in the member accounts, but we really need to check off this compliance box.
Re: An AWS account just for getting into other AWS accounts
#8> If you wish to provide access via SSH…
Don’t do this. I can’t think of a single reason that anyone ever needs to SSH directly into a server on AWS in 2022.
Use System Manager Session Manager
https://docs.aws.amazon.com/systems-manager/latest/userguide...
Short explanation: it allows you to access a Linux instance via SSH using SSM as an IAM controlled proxy or use RDP for Windows.
You don’t need ingress access to your instance or even egress internet access if your security policies mandate it as long as you set up the correct service endpoints.
Also, just use Control Tower and federate it with your IDP - Active Directory, Okta, etc.
Re: An AWS account just for getting into other AWS accounts
#9What's this like on Google Cloud? Would you create a project to get into other projects and would that achieve most of what this achieves? And would you use a GSuite address so you don't log into the console just by logging into the email?
Re: An AWS account just for getting into other AWS accounts
#10I have 1 AWS account for everything and th