Multi-account architecture
Design multi-account structures for blast radius isolation, billing, compliance.
5 lessons.
Read in order, or jump to what you need.
Why multi-account
By the end of this lesson, you will be able to justify a multi-account architecture to both engineering and finance audiences, explain the five distinct benefits, and recognize the cases where…
AWS Organizations, GCP Folders, Azure Management Groups
By the end of this lesson, you will be able to map each cloud's organizational primitives , explain how the hierarchy enables inheritance, and predict how ZopNight integrates at each level.
Cross-account discovery in ZopNight
By the end of this lesson, you will be able to configure cross-account credentials for AWS / GCP / Azure, explain the external-ID security feature, and predict the discovery flow timing for a…
Cost rollup vs cost isolation
By the end of this lesson, you will be able to distinguish rollup from isolation views, decide which view fits which audience, and use ZopNight's account filters to switch between them.
Multi-account anti-patterns
By the end of this lesson, you will be able to recognize the five most common multi-account anti-patterns, diagnose them in your own org, and outline a remediation path for each.