Company
Date Published
Author
Alexis Le-Quoc
Word count
1874
Language
English
Hacker News points
None

Summary

The text discusses account sprawl in AWS, a common problem where multiple accounts are created for different teams or individuals, leading to operational complexity and security risks. The author proposes a solution to manage multiple AWS accounts securely by creating a central management account (M) that can assume roles in the other accounts. The proposed design includes requirements such as IAM users only existing in one account, limited API access to other accounts, role delegation with MFA, and grouping privileged API calls by topic. The author provides an example implementation for three accounts and three users, demonstrating how to create groups, roles, and policies to manage access and permissions. However, the solution is limited to 10 IAM users per group, and the author invites feedback and critiques on their approach.