Aws Account Management

This one's for when you're wrangling multi-account AWS setups and need to keep IAM, billing, and org structure under control. It covers the essentials: creating organizational units, writing service control policies to enforce guardrails like region restrictions or blocking root user access, setting up Identity Center for SSO across accounts, and using Cost Explorer and Budgets to track spending. The SCP examples are solid, including patterns for requiring IMDSv2 and preventing accounts from leaving your organization. If you're implementing landing zones or trying to standardize security controls across dozens of AWS accounts, this gives you the blueprints and CLI commands to actually do it instead of clicking through the console forever.

skills.sh installs: 148
GitHub stars: 296
last updated: Jun 10, 2026

View on GitHub

Install

$ npx -y skills add hoodini/ai-agents-skills --skill aws-account-management --agent claude-code

Installs into .claude/skills of the current project.

Files

AWS Account Management

Manage AWS accounts, organizations, IAM, and billing effectively.

AWS Organizations

Organization Structure

Root
├── Production OU
│   ├── Prod Account A
│   └── Prod Account B
├── Development OU
│   ├── Dev Account
│   └── Staging Account
├── Security OU
│   ├── Security Account
│   └── Log Archive Account
└── Sandbox OU
    └── Sandbox Account

Create Organization

# Create organization (from management account)
aws organizations create-organization --feature-set ALL

# Create organizational unit
aws organizations create-organizational-unit \
  --parent-id r-xxxx \
  --name "Production"

# Create member account
aws organizations create-account \
  --email prod-aws@company.com \
  --account-name "Production Account"

# Move account to OU
aws organizations move-account \
  --account-id 123456789012 \
  --source-parent-id r-xxxx \
  --destination-parent-id ou-xxxx-xxxxxxxx