The Wayback Machine - https://web.archive.org/web/20250707112615/https://aws.amazon.com/organizations/getting-started/
Skip to main content

AWS Organizations

Getting Started with AWS Organizations
\n"},"metadata":{"tags":[]}},{"fields":{"id":"media-stepsams#c3","itemHeading":"Add accounts","itemBoolean":"false","itemLongLoc":"\n \n \n

Create new accounts or invite existing accounts to your organization

\n \n"},"metadata":{"tags":[]}},{"fields":{"id":"media-stepsams#c4","itemHeading":"Group accounts","itemBoolean":"false","itemLongLoc":"\n \n \n

Group accounts into organizational units (OUs) by use-case or workstream

\n \n"},"metadata":{"tags":[]}},{"fields":{"id":"media-stepsams#c5","itemHeading":"Apply policies","itemBoolean":"false","itemLongLoc":"\n \n \n

Apply policies to accounts or OUs, such as service control policies (SCPs) which create permission boundaries

\n \n"},"metadata":{"tags":[]}},{"fields":{"id":"media-stepsams#c6","itemHeading":"Enable AWS services","itemBoolean":"false","itemLongLoc":"\n \n \n

Enable AWS services integrated with AWS Organizations

\n \n"},"metadata":{"tags":[]}}]},"metadata":{"auth":{},"testAttributes":{}},"context":{"page":{"pageUrl":"https://web.archive.org/web/20250707112615/https://aws.amazon.com/organizations/getting-started/"},"contentType":"page","environment":{"stage":"prod","region":"us-west-2"},"sdkVersion":"2.0.19"},"refMap":{"manifest.js":"30c42705c8","rt-da-steps-collection.rtl.css":"02a8d2f4ce","rt-da-steps-collection.css":"b03d0b9124","rt-da-steps-collection.css.js":"00591c00ec","rt-da-steps-collection.js":"d8b165fb9f","rt-da-steps-collection.rtl.css.js":"f0649a6b5b"},"settings":{"templateMappings":{"patternHeading":"patternHeading","patternSubheading":"patternSubheading","patternDark":"patternBoolean2","heading":"itemHeading","body":"itemLongLoc","dark":"itemBoolean","hyperlinkText":"itemCTALabel","hyperlinkUrl":"itemCTAURL","mediaAltText":"itemMediaAltText","mediaUrl":"itemMediaURL"}}}

AWS Organizations

Centrally govern your environment as you grow and scale your workloads on AWS

1

Create account

Create a new account to be the management account of the organization

2

Add accounts

Create new accounts or invite existing accounts to your organization

3

Group accounts

Group accounts into organizational units (OUs) by use-case or workstream

4

Apply policies

Apply policies to accounts or OUs, such as service control policies (SCPs) which create permission boundaries

5

Enable AWS services

Enable AWS services integrated with AWS Organizations

Creating an organization is simple

  1. Select (or create) an account to manage your organization (we recommend using an account that does not run existing workloads). This will be the management (formerly known as master) account for your organization
  2. Visit the AWS Organizations page on the console 
  3. Choose “Create Organization.” Your organization is now created
  4. Verify the email address of the management account

Once you’ve created the organization and verified your email, you can create or invite other accounts into your organization, categorize the accounts into organizational units (OUs), create service control policies (SCPs), and take advantage of the Organizations features from supported AWS services.

You can also create an organization via CLI or API.

We recommend reviewing the article, Establishing your best practice AWS environment, if you would like to learn how to build your organizational unit (OU) structure.

AWS re:Invent 2019: Architect governance at enterprise scale with Goldman Sachs