Contents
In brief
AWS gets simpler when an account, a network and an identity are treated as the product, and individual services are replaceable parts.
Original CloudExchangers explainer. It describes established public practice and labels the desk’s judgment as analysis. It is not a report of a newly announced event.
The account is the blast radius
On Amazon Web Services, the account is the first security and billing boundary. Organizations group accounts. Identity and Access Management decides what a principal can do inside them. A single shared account for every team looks faster until one runaway job, or one broad role, belongs to everyone.
