aws

• separate-aws-production-and-development-accounts
•  separate aws accounts for
• production(consolidated billing)
• developer
• QA
• billing
• for consolidated billing we need to create the organization and the creator of the organization is the owner of the organization and can control the services of the other linked accounts.
• for this the owner need to add account through the email or account id. if the invitee accepts the invitation then services of this account can be controlled by the organization owner.
• details is as follows:
• If you accept the invitation, the administrator of the organization can attach policy-based controls to your AWS account. The organization administrator can control which AWS services and APIs are allowed in this account for business reasons such as security or budgetary controls. These controls can include preventing this account from leaving the organization.