I will set up AWS multi account governance and landing zone security
Head of Architecture
Über diesen Service
I design guardrails before AWS gets messy.
I will set up a practical AWS multi-account foundation in your own AWS Organization, using the feature level that fits your needs.
Basic - AWS Organizations foundation: member-account lifecycle, a hierarchy of up to 3 OUs, consolidated billing, CloudFormation and executable scripts, plus documentation.
Standard - Adds IAM Identity Center (SSO), least-privilege access, permission sets and account assignments, and OU-level SCP guardrails.
Premium - Adds an AWS Control Tower landing zone, selected controls, and Account Factory for a new or eligibility-approved organization.
Every package includes configuration and documentation. Standard and Premium include installation, a secured environment, and handoff.
Scope: work stays in your AWS Organization. I never need root credentials. Cross-account networking and formal compliance certification are excluded. Control Tower is Premium-only and subject to eligibility assessment. Additional OUs can be added through the extra.
Pricing assumes no more than 10 existing member accounts. Larger estates, bulk remediation, or account-specific exceptions require custom scope.
Cloud-Provider:
Amazon Web Services
Expertise:
Entwicklung
•
Konfiguration
Mein Portfolio
Meine weiteren Dienstleistungen im Bereich Cloud-Computing
FAQ
Do you need root access to my AWS Organization?
No. I use least-privilege federated or SSO access where possible, with a scoped IAM role as the fallback.
Is this a formal compliance audit?
No. This is an architecture-level governance setup, not a SOC 2, HIPAA, PCI, or other formal audit or certification.
Which infrastructure-as-code tool do you use?
I use AWS CloudFormation plus executable automation scripts where an AWS configuration workflow requires them.
Is cross-account networking included?
No. This Gig covers organization structure, identity, guardrails, and centralized governance. Networking can be separately scoped.
Is AWS Control Tower included?
Premium includes an AWS Control Tower landing zone, selected controls, and Account Factory for a new or eligibility-approved organization.
Is IAM Identity Center (SSO) included?
Yes, in Standard and Premium. I configure the agreed access model, permission sets, and account assignments.

