AWS Organizations Features

Using AWS Organizations, you can create groups of AWS accounts that best suit the needs of your business. For example, you can create separate groups of accounts to use for development and production stages, and then apply different policies to each group.

AWS Organizations provides you a policy framework for multiple AWS accounts. You can apply policies to a group of accounts or all the accounts in your organization.

With AWS Organizations, you can use service control policies (SCPs) to manage access to service APIs and resources. For example, you can apply policies to a group of accounts to remove access to specific services, protect resources from deletion except by specific AWS Identity and Access Management (IAM) users, and restrict resource creation to only certain AWS regions.

The AWS Organizations APIs help you automate the creation and management of new AWS accounts. Using the Organizations APIs, you can create and add new accounts to a group. Policies attached to a group are automatically applied to accounts added to the group.

AWS Organizations enables you to manage, provision, and configure AWS services across accounts in your organization. For example, AWS Single Sign-on enables simple deployment of identities to all accounts in your organization and AWS Service Catalog enables you to define a portfolio and share it with a portion of your organization or across your entire organization. For a full list of integrated services, please see AWS Services That You Can Use with AWS Organizations.

AWS Organizations enables you to set up a single payment method for all the AWS accounts in your organization through consolidated billing. With consolidated billing, you can see a combined view of charges incurred by all your accounts, as well as take advantage of pricing benefits from aggregated usage, such as volume discounts for Amazon EC2 and Amazon S3.