Resource Hierarchy
Resource position affects inherited controls, but billing, quota, and isolation scopes differ. Review each relationship before reorganizing the hierarchy.
-
-
Accounts, Guardrails, and the Landing Zone
A cloud foundation establishes access, policy, ownership, and connectivity. Plan the boundaries early and verify inherited controls as requirements change.
-
Service Control Policy
SCPs limit covered AWS principals without granting access. Resource-policy grants and principal identity determine which restrictions apply.
-
Landing Zone
A landing zone is a deployed, governed cloud environment for workloads. Supplying new ones repeatably takes a request and handover process; without it, waiting can push teams toward accounts of their own.