Skip to main content
ManagementManagementIntermediateCLF-C02SAA-C03

Organizations

AWS Organizations

A service that manages multiple AWS accounts together.

In one sentence

A service that manages multiple AWS accounts together.

Overview

A service for centrally managing multiple AWS accounts. Provides organizational units, SCPs, and consolidated billing.

Common use cases

  • Separating production and development accounts
  • Consolidated billing
  • Usage restrictions with SCPs

CLF-C02 exam points

  • Used to manage multiple accounts
  • Provides consolidated billing
  • SCPs cap the maximum permissions of accounts

SAA-C03 exam points

  • Separate accounts by workload
  • Understand SCPs as permission ceilings, not grants
  • Understand the relationship with Control Tower

Practical Use

AWS Organizations is a service for centrally managing multiple AWS accounts as a single organization. Under the organization, organizational units (OUs) can be created, with member accounts placed beneath them. Organizing accounts in a hierarchical structure makes it easier to manage them by purpose (production, staging, sandbox), department, or project. Major features include the programmatic creation of new AWS accounts, the use of Service Control Policies (SCPs) to enforce upper-bound access permissions across the entire organization or specific OUs, consolidated billing that aggregates the bills of all member accounts under the management account, and centralized deployment and aggregation of services such as AWS CloudTrail, AWS Config, Security Hub, and GuardDuty across the entire organization. A typical use case is serving as the foundation for a multi-account strategy used by enterprises and individual developers who operate multiple accounts. For example, production workloads and development or testing workloads can be separated into different accounts, with SCPs structurally preventing access from the development account to production resources. From a pricing perspective, Organizations itself is available at no additional cost, and consolidated billing allows Reserved Instances, Savings Plans, and free tier benefits to be shared and optimized across the entire organization, which simplifies cost management in multi-account operations.

Official Documentation

Cost notes

  • No additional charge for Organizations itself
  • Watch out for unused resources left across multiple accounts

Security notes

  • Require MFA on the management account
  • Use SCPs to restrict risky regions or services

Related services

Related comparison articles

Related comparison articles have not been added for this term yet.

Related architecture diagrams

Related architecture diagrams have not been added for this term yet.

Tags

account-managementgovernance

Last updated: 2026-06-01