org-formation-cli VS superwerker

And these guardrails are usually owned by platform teams. One downside to doing all these with AWS Organizations is that it involves a lot of clickops… This is where I would turn to org-formation, an open-source tool that gives you infrastructure-as-code for AWS Organizations. It’s a really powerful tool and I strongly recommend that you check it out if you haven’t already.

If you don’t like control tower, try org formation. https://github.com/org-formation/org-formation-cli

I found myself bootstrapping a new AWS Organization. I am using org-formation to define the basic account structure, an OIDC IdP for Github Actions and the essential roles for Terraform to do its job.

an AWS account is free, so if you're planning basically reselling AWS, an account per tenant is a nobrainer. There are a few ways to create loads of accounts, org-formation is my favorite

We use https://github.com/org-formation/org-formation-cli for most of our work, though just vanilla Terraform can work reasonably well for most of the things.

By the way, if you like the "deploy this stack to multiple accounts"-feature of Stacksets, you're going to lovveee org-formation.

This led me to two problems. The first was the perennial issue I've had with Terraform from day one: "How do I manage state?". The second issue was how do I leverage some form of CI/CD tooling to allow me to leverage one of Terraform's biggest strengths - the terraform plan capability. Since Fooli is an AWS product, I figured that I should be able to use AWS native tools for this. I've used CodePipeline in the past to preview change-sets with aws-org-formation, so I thought it would be easy to find a well-worn pattern from AWS on doing it.

You can now manage your AWS Organization through CloudFormation, including creating accounts, organizational units, and policies. It's one of those things you are surprised were not already possible. However, I will stick to the OrgFormation for my own accounts, as it offers additional features like deploying stacks and performing custom logic across the organization.

I had set up a Community Builders AWS Organization recently using superwerker. My intent is for this organization to show the best practices for setting up a multi-account organization with Organizational Units representing sandbox, test and production environments, scoped developer roles and limited production access. I think the developer roles need a little work, but the group was able to be productive in this environment, so that's a win.

If you go with CT, the easy way to get started it to use: https://github.com/superwerker/superwerker I use it for my personal accounts, and minimal installation is less than $10 monthly. You should get an email domain to go with it; using .link domains is inexpensive. For email addresses, use plus email addresses. That way, you can land all emails in the same account. (I use a junk google email address for those.) I guess I would recommend CT, especially with a low-bar entry like superwerker.

On my accounts, I use this: https://github.com/superwerker/superwerker, the resources it creates by default cost me less than $10 per month, I have only a few accounts. Easy way to get started.

I kinda spam this a lot but if you are new building on AWS and have a domain name you can put under Route53 control than check out https://superwerker.cloud/ -- it's a free and AWS blessed stack that automates the setup of an multi-account AWS org complete with all the initial SSO, governance, audit and compliance stuff ready to go.

I use this stack pretty often when setting someone up with a greenfield proper AWS multi account structure with security guardrails and compliance frameworks provisionally set up: https://superwerker.cloud - it’s open source and “blessed” by AWS but built and maintained by a commercial consultancy

Superwerker is an open-source AWS CloudFormation solution that simplifies the setup of an AWS account. It follows best practices for security and efficiency. It was/is developed and maintained by AWS Advanced Partners kreuzwerker and superluminar. It even has its own landing page with great content like a short video and more. Hard to believe this is a free product.

If you are going to blow it up anyway check out https://superwerker.cloud — free and aws approved QuickStart for multi account plus SSO plus all the security guardrails.

. I use superwerker even for my accounts (near 'no use' costs around $10 per month. The cost will go up based on what services are used. werker. I use superwerker even for my personal accounts (near 'no use' costs around $10 per month. Cost will go up based on what services are used.

A Reddit question for how to set up AWS Organizations and AWS SSO. I recommended giving https://github.com/superwerker/superwerker a try.

I personally use this: https://github.com/superwerker/superwerker