IaCActiveOpen source
AWS Multi-Account Organization
A multi-account AWS foundation in Terraform: Organizations with OUs, account vending, preventative Service Control Policies (deny leave-org, protect CloudTrail, region restriction), and a centralised, tamper-resistant CloudTrail.
Highlights
- ▸OU hierarchy + account vending
- ▸SCP guardrails (org-wide deny)
- ▸Centralised CloudTrail logging
Tech Stack
AWSTerraformOrganizationsSCPCloudTrail