AWS Organizations
A service for centrally managing and governing multiple AWS accounts.
AWS Organizations lets a company consolidate many AWS accounts under a single management account. Accounts are arranged into Organizational Units (OUs), which can nest inside one another, allowing teams or business units to operate in isolated accounts while sharing centralized governance. Consolidated billing rolls every member account’s usage into one monthly invoice, enabling volume pricing discounts across the organization. The exam often pairs Organizations with Service Control Policies (SCPs), permission guardrails attached to OUs or accounts. SCPs do not grant permissions — they only restrict what IAM identities in member accounts may do, so an SCP can block an action even if an account’s IAM policy explicitly allows it.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →