Ravi Sir's Cards › AWS
Group or boundary?
This comparison card contrasts Group or boundary. Organizational Unit: Folder of accounts that share SCPs and structure. Account is described as an AWS account bill/isolation boundary. The card pairs Organizational Unit with apply policy to many accounts, and Account with blast radius and billing owner.
Read card text
What this card says
Group or boundary?
Organizational Unit
Folder of accounts that share SCPs and structure.
Account
An AWS account bill/isolation boundary.
Key points
Sandbox OU holds 12 student accounts.
One production payments account.
Example
OU=ou-xxxx / Account 123456789012
Use when
Apply policy to many accounts.
Blast radius and billing owner.