Creating an organizational unit (OU) with Amazon Organizations
When you sign in to your organization's management account, you can create an OU in your organization's root. OUs can be nested up to five levels deep. To create an OU, complete the following steps.
Important
If this organization is managed with Amazon Control Tower, then create your OUs with the Amazon Control Tower console or APIs. If you create the OU in Organizations, then that OU isn't registered with Amazon Control Tower. For more information, see Referring to Resources Outside of Amazon Control Tower in the Amazon Control Tower User Guide.
Minimum permissions
To create an OU within a root in your organization, you must have the following permissions:
-
organizations:DescribeOrganization
– required only when using the Organizations console -
organizations:CreateOrganizationalUnit
To create an OU
-
Sign in to the Amazon Organizations console
. You must sign in as an IAM user, assume an IAM role, or sign in as the root user (not recommended) in the organization’s management account. -
Navigate to the Amazon Web Services accounts
page. The console displays the Root OU and its contents. The first time you visit the Root, the console displays all of your Amazon Web Services accounts in that top-level view. If you previously created OUs and moved accounts into them, the console shows only the top-level OUs and any accounts that you have not yet moved into an OU.
-
(Optional) If you want to create an OU inside an existing OU, navigate to the child OU by choosing the name (not the check box) of the child OU, or by choosing the next to OUs in the tree view until you see the one you want, and then choosing its name.
-
When you've selected the correct parent OU in the hierarchy, on the Actions menu, under Organizational Unit, choose Create new
-
In the Create organizational unit dialog box, enter the name of the OU that you want to create.
-
(Optional) Add one or more tags by choosing Add tag and then entering a key and an optional value. Leaving the value blank sets it to an empty string; it isn't
null
. You can attach up to 50 tags to an OU. -
Finally, choose Create organizational unit.
Your new OU appears inside the parent. You now can move accounts to this OU or attach policies to it.
To create an OU
The following code examples show how to use CreateOrganizationalUnit
.