AWS account hygiene & landing zone basics
Before you ever push code, your AWS account needs structure — multi-account org, IAM least-privilege, billing alarms, and CloudTrail. We walk through the production pattern we use for every Kalyankari Softnet client.
- · AWS Organizations + Control Tower vs DIY landing zone
- · Root account hardening: MFA, hardware key, billing alarms, no daily use
- · IAM Identity Center (SSO) — why root + IAM users is a 2014 pattern
- · Service Control Policies that prevent the most common production accidents
- · Free-tier vs Reserved Instance vs Savings Plan — when each makes sense
Provision a 3-account AWS organisation with SSO + SCPs in your sandbox.