Enterprise Foundation
An enterprise AWS environment needs more than workload services. This part shows how identity, accounts, organizational hierarchy, landing zones, policy, security, and cost ownership create safe autonomy.
What You Will Learn
Design human and workload access with least privilege.
Separate identity federation from workload authorization.
Use accounts and organizational units as ownership and blast-radius boundaries.
Apply governance and cost controls without blocking delivery teams.
Chapters
Identity and Access with IAM — understand principals, policies, roles, evaluation, and scope.
Enterprise Identity, Federation, and Workload Access — connect workforce identity, temporary access, and machine identity.
AWS Account Strategy, Organizations, and Landing Zones — design scalable organizational and environment boundaries.
Governance, Policy, Security, and Cost Ownership — combine guardrails, evidence, protection, and financial accountability.
How the Chapters Connect
Identity begins the trust model. Federation and workload access make it usable at enterprise scale. Account strategy supplies structural boundaries, and governance turns those boundaries into a sustainable operating model.