There are a number of ways to group and arrange your AWS accounts. How you do this is completely up to you, but the following are a few examples to consider:
- Business unit (BU) or location: You may wish to allow each BU to work in isolation on its own products or services, on its own schedule, without impacting other parts of the business.
- Cost center: Grouping according to cost may help you track spending versus the allocated budget.
- Environment type: It may make sense to group your development, test, and production environments together in a way that helps you manage the controls across each environment.
- Workload type or data classification: Your company may want to isolate workload types from each other, or ensure that particular controls are applied to all the accounts containing a particular kind of data.
In the following fictitious example, we have...