Smallstep SSH VS AWS Organizations

Through a combination of the properties that are in an SSH certificate and configuration on the hosts, you'll be able to realize RBAC. If you're using the open source step-ca, this will require you to configure things yourself on the hosts. We also have an offering where this capability and management/auditing of the rules is hosted for you, which makes that specific part easier: https://smallstep.com/sso-ssh/. Source: 10 months ago

If you are working in a multi-account setup which should be the case if you run more than one workload in more than one SDLC stage, it is a best practice to use AWS Organizations to govern and manage your AWS accounts. Going further into the best practices, it is a a recommendation to have a separate Security or Audit AWS Account to manage your security services on the organizational scale. In that case, you... - Source: dev.to / 2 months ago

The solution here requires you to be using AWS Organizations to create AWS accounts for your developers. - Source: dev.to / 10 months ago

At this scale, operations can take a lot of time, because there are multiple operational tasks that we need to do when AWS accounts are leaving the AWS Organization or Teams are nuking the AWS account, StackSets Instances get drifted, because not all required resources for compliance can be secured ( SCP Limitations ), existing AWS accounts are joining the AWS Organization and all mandatory StackSets needs to be... - Source: dev.to / 11 months ago

AWS Organizations. (n.d.). Retrieved April 25, 2023, from https://aws.amazon.com/organizations/. - Source: dev.to / about 1 year ago

No doubt about it, AWS SSO (or should I say IAM Identity Centre?) is a great addition to the overall access management and security in AWS. But, as you mature in the cloud with a touch of AWS Organizations and dash of well-architected framework you'll soon have many AWS accounts and managing all of those accounts kind of sucks. - Source: dev.to / about 1 year ago