Deploying to multiple accounts
Now let's begin working with multiple accounts. For this section, I've created two additional accounts in AWS Organizations: testing and production.
Important note
Since this book is not about multi-account strategies (MAS), we're not going to cover the creation of child accounts and organizational units in this book. If you need to learn about these, then you can start looking at AWS Organizations (https://aws.amazon.com/organizations/). If you don't use a multi-account strategy and don't plan to, then you may skip this section.
Since we will work in various accounts, we need to tweak our StackSet permissions template. We've separated it into two templates—one for administrator role and one for an execution role. We don't need to create an execution role in our main (or to use the terms of AWS, our payer) account, because no stack instance will be created in it.
Our StackSet administrator role is...