Related Amazon services

IAM

Your Amazon Web Services account is closely integrated with Amazon Identity and Access Management (IAM). You can use IAM with your account to ensure that other people who work in your account have as much access as they need to get their jobs done. You also use IAM to control access to all of your Amazon resources, not only account specific information. It's important that you familiarize yourself with the major concepts and best practices of IAM before you get too far along with setting up the structure of your Amazon Web Services account. For more information, see Security best practices in IAM in the IAM User Guide.

Amazon Organizations

If your company is large or likely to grow, you might want to set up multiple Amazon accounts that reflect your company's specific structure. Amazon Organizations provides the underlying infrastructure and capabilities for you to build and manage your multi-account environments. You can combine your existing accounts into an organization that enables you to manage the accounts centrally. You can create accounts that automatically are a part of your organization, and you can invite other accounts to join your organization. You also can attach policies that affect some or all of your accounts. For more information, see When to use Amazon Organizations.

Amazon Control Tower

Amazon Control Tower provides a simplified way to set up and govern a secure, multi-account Amazon environment. Amazon Control Tower automates the creation of your multi-account environment using Amazon Organizations, instantiating a set of initial accounts and with some default guardrails and configurations for the environment. You can use Amazon Control Tower to provision new Amazon Web Services accounts in a few steps while ensuring that the accounts conform to your organizational policies. For more information, see When to use Amazon Control Tower.