Many companies group AWS accounts into logical structures to better organize and secure their AWS resources. Customers typically use organizational units (OUs) with AWS Organizations to create hierarchical and logical account groupings and then attach service control policies (SCPs) to an OU to ensure the correct policies are applied across the accounts without requiring custom scripts and manual processes. The approaches described in the provisioning of the commonly used security account structures around centralizing logging from AWS CloudTrail and AWS Config can be extended to database snapshots as well. This account structure can be beneficial for customers who want to centrally store, secure, and process Amazon RDS and Aurora snapshots and configuration data.
