COURSE NAME
FALL SEMESTER 20XX
INSTRUCTOR: DR. WENDY WRITER
no_reply@[Link]
Hello everyone and welcome to this session. Here we are going to look at AWS or
initiation, account hierarchy, consolidated billing and ARN. To start with, let me
share an overview of what is AWS. Aws, amazon Web Services is the most
comprehensive and broadly adopted Cloud platform, offering over 200 services
such as compute, database storage, etc. Aws provides on-demand delivery of
technology services for the internet with pay-as-you-go pricing. Now, let's see about
what AWS cognition is and how consolidated billing works. So what is AWS has? Aws
administration is an account management service that enables you to consolidate
multiple AWS account into an organization that you create centrally managed. Here,
let's have a look. We have got our organisation. This could be the company that you
work for. Then we have our group AWS account. This is a master account and the
best practices are used this for billing moonlit, and don't deploy any resources.
Within Michigan, we have we use our unit cell. For example. This could be our
Doughboy, you and Dave accounts. This might be our test two and test accounts.
And this could be a broad overview and product. The way you apply permission is
by using policies. So just like what we do in IAM, we apply a policy document and
then that policy will be inherited. If we apply the policy here to this. And perhaps
this is our development team. We don't want our developer to use something like
EC2, then this specific service can be blocked. The entire development team that
will then trickled down to all other AWS account and all use admitted. So that's all
1
AWS augmentation is about. It allows you to have multiple AWS account and be
able to manage centrally. Now let's move on to the consultant. And the
fundamental principle behind pricing with AWS is the more that you use, the less
that you pay. When we request can come from provider, we provide our credit
cards or billing details which will be configured against this pair, accompany any
account requested can be linked to this pair, which is also known as through to
counteract. This helps in the consolidation of the blink cost and usage for all the
links and account. It is important to note that the pair or root account has free
capabilities like linked account and vice versa. Except the complete bill is published
in that pair. When you use consultative dealing with AWS or initiation, it considers
the aggregate of all of your accounts. For example. The more you use is three
across and then list. The advantages of consolidated billing is one bill per
organization. It is very easy to track charges and allocate cost and you get volume
pricing discount. Now, I will show you how to view the consolidated under linked
account details in AWS console. Login to the pair account search with AWS or
glaciation. Here I have used earlier, it listed until recently visited. Click on this
surface. So you can view the root account and its associated linked account details.
This is how I explained earlier with our diagram. Here we have multiple OUs
accounts associated to heat. And this is our master account, which is termed as
management account. So we will get a consolidated billing under this account. This
is how the AWS or vegetation it looks like. Let's move on to the air and rule. What is
the Aaron? Aaron stands for Amazon resource name or unique identifier assigned
to engage with AWS resources. The default format is followed by partition. This
region, account, and Type IV. For example. Below is the ARN looks like for an EC2
instance. It starts with the name ARN. Then partition. Aws is the partition for
standard region. For the other region, it will happen with the region name is here.
2
In the example, I have mentioned AWS hyphen Cn, which refers China, India,
followed by service that is easy to region, US East one, then account without
hyphen and then resource type and it's 80. They are ands are very important when
it comes to security practices for IAM roles and policies. The key features of air and
they are used to in IAM policies for granting are restricted to granular level access
to the sources. It also can be used in automation scripts and a big call to refer other
resources. This is how we are in books. And this is all about AWS, account hierarchy,
consultative. And here. Thank you.