Uploaded byAWS Germany
Managing AWS Accounts at Scale
The document discusses the management of AWS accounts and emphasizes the importance of automation in account creation and access management. It highlights the tools available for efficient AWS account handling, such as CloudFormation and S3, while addressing security, governance, and cost tracking considerations. The document also raises a few questions to engage the audience on their familiarity with AWS account management.
Managing AWS Accounts at Scale
- 1.
- 2. Scout24 Inspiring your best.We connect people, cars and homes. AWS Popup Loft 15.10.2018 Berlin
- 3.
- 4. Moderation is afatal thing. Nothing succeeds like excess. - Oscar Wilde
- 5. How much istoo much?
- 6. POP Quiz • Howmany accounts we have? 1. Less than 3 2. Less than 200 3. More than 500
- 7.
- 8.
- 9.
- 10. What comes inthe box?
- 11. POP QUIZE • Howlong it takes to create an AWS account? 1. Less than 1 minute 2. About 4 hours 3. More than a day
- 12. Let them dothe job! Image credit: http://www.clker.com • Automation is the key! • Some things are hard to automate
- 13. Things you shoulduse • Cloud Formation • Stack sets • Organization IDs • Custom resources • SSM • S3 • Lot’s of Python code (or Go to be more trendy)
- 14.
- 15. OAuth 2.0 Authorization Server User AccessProvider (Rabbit) AWS Console Access Token
- 16. Security and governance •Guard Duty • Trusted Advisor • Checking IAM roles • Checking Security Groups • Checking outdated AMIs • S3 Bucket Policies • Etc ….
- 17. Money, Money, Money •Cost dashboards • Per team • Per segment • RI coverage and purchase • In payer account • In Product accounts
- 18. Communication • HTTPS everywhere •Endpoint Authentication • Streaming • VPC Peering (not much)
- 19. Weirdos everywhere • BillingAccount • Backup accounts • Some shared accounts
- 20.