AWS is pushing Organizations/Accounts as something like GCP's Projects and it mostly works, cross account iam works pretty good, so does many other services but sadly this is not reflected in the support subscriptions.<p>You want help with a problem in your staging account? pay for support, fair enough. You want help with your production? oh sorry, you have to pay again.
I'd love it if at a glance I could see all of the AWS resources that I am using that cost me money, across all the regions.<p>Right now I feel like I would have to poke into every menu option in every region across the entire set of AWS services to find out exactly what I'm using.<p>The cynic in me wonders if this is not a priority for AWS because they make so much money from forgotten and hard to find resources that are being used and paid for but essentially lost in the interface.<p>When I saw the new product name I thought "maybe this is it!"
This looks like a public facing version of a tool that AWS uses internally, which is great. Super easy tool to setup and govern AWS accounts, and also access the accounts to which you have access. I always wondered why they didn't sell it to their customers but I guess now they will!
Just tried it on our master account:<p>> You tried to use an account that is a member of an organization in AWS Organizations. To set up your AWS Control Tower landing zone, use an account that is not a member of an organization.<p>Looks like it’s only feasible if you’re starting from scratch.
Sorry but I've never felt that Amazon is completely operating in good faith with regards to allowing users to manage their costs. The proof of that is the fact that they <i>still</i> don't have a page where you can see the price of an ec2 instance alongside its stats. I've been wanting to see that for ten years and they still haven't added it.
I love that AWS is starting to care more about providing these services. For context, we have basically been building this for 2 years in our company internally to provide hundreds of “compliant by default” accounts. Every company seems to do it themselves.<p>What I personally find very frustrating is the lack of being able to migrate any existing organisations into this. I’d love to get rid of some of our account provisioning but this would basically mean starting over with a brand-new AWS Organization which is impossible for us.<p>It still is quite a hassle to manage many accounts (and resources you need in them) so I hope this service will sooner or later help us with this.<p>PS: if anyone is over at re:Inforce and wants to talk about anything AWS Orgs & accounts, feel free to mail me (profile)!
Thank you AWS. In the meantime, if you could offer me just one basic setting that users have been asking for years (hard limit on your spending), it would be even better.