Linking AWS Organizations
You can leverage AWS Organizations to automatically configure linked accounts.
Last updated
You can leverage AWS Organizations to automatically configure linked accounts.
We offer the ability to automatically discover and link all accounts in AWS Organizations to the CSS Application. In practical terms, once this feature is configured, it'll automatically perform the Linking an AWS Account function.
To do so we deploy the following pieces into the Organizations Management Account:
CloudFormation Stack to allow Console to interact with the Management Account
CloudFormation StackSet to deploy our linked stack into all accounts within the Organization

To link your AWS Organization, go to Manage Accounts and choose the option to link an Organization. This opens the Link AWS Organization for Automatic Account Discovery popup.

Deploy the Organizations CloudFormation Template in your AWS Organizations management account by clicking Launch Stack in AWS, or click Download Template if you'd rather deploy it yourself.
Once the stack deployment completes, enter the Management Account ID where you deployed the template.
Optionally give the Organization a Nickname.
Select the Default Group where discovered accounts should be added.
Leave Mirror OU structure as groups checked if you'd like groups automatically created to match your AWS OU hierarchy - this is recommended.
Leave Auto-activate discovered accounts checked if you want newly discovered accounts to be automatically activated once their linked account stack is deployed.
Click Link Organization to complete the setup.
Once linked, any new account added to the Organization will automatically be discovered and go through the same Linking an AWS Account process without manual intervention.
Last updated