Scaling Accounts and Permissions Management

Level: 300

In this tech talk, we will share best practices to manage permissions at scale for these workloads. We start by recommending ways you can separate workloads using accounts and AWS Organizations. Once you have an account structure that scales with your business needs, we share preventative guardrails you can enable across your AWS organization. This helps you ensure that rules of your organization are followed consistently across your workloads. With permission guardrails in place, we shift focus to granting permissions within an account. We review how you can enable developers to create Identity and Access Management (IAM) roles for the applications using permission boundaries. We also review how to develop permission rules that set granular permissions that scale as you add resources using attribute-based access control. With guardrails and scalable permissions, we show you how you can grant developers broad access enabling them to move fast building on AWS, while monitoring and reducing permissions using IAM access advisor as their access patterns settle.