{"id":4043,"date":"2025-10-31T16:55:51","date_gmt":"2025-10-31T08:55:51","guid":{"rendered":"https:\/\/aws-oncloudai.com\/?p=4043"},"modified":"2025-10-31T16:55:51","modified_gmt":"2025-10-31T08:55:51","slug":"in-depth-interpretation-of-aws-organizations-building-unified-management-for-multiple-accounts","status":"publish","type":"post","link":"https:\/\/aws-oncloudai.com\/zh_hk\/in-depth-interpretation-of-aws-organizations-building-unified-management-for-multiple-accounts\/","title":{"rendered":"\u6df1\u5165\u89e3\u8b80AWS Organizations\uff1a\u5efa\u69cb\u591a\u5e33\u6236\u7d71\u4e00\u7ba1\u7406"},"content":{"rendered":"

\u5728\u96f2\u7aef\u904b\u7b97\u898f\u6a21\u4e0d\u65b7\u64f4\u5f35\u7684\u4eca\u5929\uff0c\u4f01\u696d\u4f7f\u7528AWS \u7684\u67b6\u69cb\u4e5f\u65e5\u76ca\u8907\u96dc\u3002\u7121\u8ad6\u662f\u5927\u578b\u96c6\u5718\u7684\u591a\u696d\u52d9\u7dda\uff0c\u6216\u662f\u4e2d\u5c0f\u4f01\u696d\u7684\u591a\u5c08\u6848\u5354\u4f5c\u5834\u666f\uff0c\u5982\u4f55\u6709\u6548\u7387\u3001\u5b89\u5168\u5730\u7ba1\u7406\u591a\u500bAWS \u5e33\u6236<\/strong>\uff0c\u59cb\u7d42\u662fIT \u7ba1\u7406\u8005\u9762\u81e8\u7684\u91cd\u8981\u8ab2\u984c\u3002
\u70ba\u4e86\u89e3\u6c7a\u9019\u4e00\u75db\u9ede\uff0cAWS \u63a8\u51fa\u4e86 AWS Organizations<\/strong> \u2014\u2014 \u4e00\u9805\u5c08\u70ba\u591a\u5e33\u6236\u96c6\u4e2d\u5316\u7ba1\u7406<\/strong>\u800c\u8a2d\u8a08\u7684\u670d\u52d9\u3002\u672c\u6587\u5c07\u5f9e\u529f\u80fd\u7279\u6027\u3001\u6838\u5fc3\u512a\u52e2\u3001\u61c9\u7528\u5834\u666f\u53ca\u6700\u4f73\u5be6\u52d9\u7b49\u89d2\u5ea6\uff0c\u5e36\u60a8\u5168\u9762\u4e86\u89e3AWS Organizations \u7684\u50f9\u503c\u3002<\/p>\n

 <\/p>\n

\u4ec0\u9ebc\u662fAWS Organizations\uff1f<\/h4>\n

AWS Organizations<\/strong> \u662f\u4e00\u9805\u5141\u8a31\u4f7f\u7528\u8005\u5c07\u591a\u500bAWS \u5e33\u6236\u96c6\u4e2d\u7ba1\u7406\u7684\u670d\u52d9\u3002\u900f\u904e\u8a72\u670d\u52d9\uff0c\u4f01\u696d\u53ef\u4ee5\uff1a<\/p>\n

    \n
  • \n

    \u7d71\u4e00\u5e33\u6236\u5275\u5efa\u8207\u7d44\u7e54\u7d50\u69cb\uff1b<\/p>\n<\/li>\n

  • \n

    \u96c6\u4e2d\u61c9\u7528\u5b58\u53d6\u8207\u5b89\u5168\u7b56\u7565\uff1b<\/p>\n<\/li>\n

  • \n

    \u512a\u5316\u8a08\u8cbb\u8207\u6210\u672c\u7ba1\u7406\uff1b<\/p>\n<\/li>\n

  • \n

    \u63d0\u5347\u6cbb\u7406\u8207\u5408\u898f\u6548\u7387\u3002<\/p>\n<\/li>\n<\/ul>\n

    \u63db\u53e5\u8a71\u8aaa\uff0cOrganizations \u5c31\u50cf\u4f01\u696d\u96f2\u7aef\u74b0\u5883\u7684\u201c\u7ba1\u63a7\u4e2d\u6a1e\u201d\uff0c\u8b93\u60a8\u5728\u591a\u5e33\u6236\u9ad4\u7cfb\u4e0b\u4ecd\u80fd\u4fdd\u6301\u6e05\u6670\u7684\u7d50\u69cb\u3001\u7d71\u4e00\u7684\u5b89\u5168\u7b56\u7565\u548c\u9ad8\u6548\u7684\u6210\u672c\u63a7\u5236\u3002<\/p>\n

    <\/h4>\n

    AWS Organizations \u7684\u6838\u5fc3\u529f\u80fd<\/h4>\n

    1. \u7d44\u7e54\u7d50\u69cb\u7ba1\u7406\uff08Organization Units, OU\uff09<\/strong><\/h5>\n

    \u4f7f\u7528\u8005\u53ef\u4ee5\u50cf\u5efa\u69cb\u4f01\u696d\u90e8\u9580\u67b6\u69cb\u4e00\u6a23\uff0c\u70ba\u4e0d\u540c\u696d\u52d9\u7dda\u3001\u5c08\u6848\u7d44\u6216\u74b0\u5883\uff08\u5982\u958b\u767c\u3001\u6e2c\u8a66\u3001\u751f\u7522\uff09\u5efa\u7acb\u5c64\u7d1a\u5316\u7684\u7d44\u7e54\u55ae\u5143\u3002
    \u9019\u7a2e\u5206\u5c64\u7d50\u69cb\u4fbf\u65bc\uff1a<\/p>\n

      \n
    • \n

      \u91dd\u5c0d\u6027\u5730\u5206\u914d\u6b0a\u9650\uff1b<\/p>\n<\/li>\n

    • \n

      \u61c9\u7528\u4e0d\u540c\u7684\u5b89\u5168\u7b56\u7565\uff1b<\/p>\n<\/li>\n

    • \n

      \u5feb\u901f\u64f4\u5c55\u65b0\u5e33\u6236\u800c\u4e0d\u5f71\u97ff\u6574\u9ad4\u67b6\u69cb\u3002<\/p>\n<\/li>\n<\/ul>\n

      2. \u96c6\u4e2d\u8a08\u8cbb\uff08Consolidated Billing\uff09<\/strong><\/h5>\n

      AWS Organizations \u652f\u63f4\u5c07\u591a\u500b\u5e33\u6236\u7684\u5e33\u55ae\u6574\u5408\u70ba\u4e00\u4efd\u7d71\u4e00\u5e33\u55ae\u3002
      \u5176\u512a\u9ede\u5305\u62ec\uff1a<\/p>\n

        \n
      • \n

        \u6210\u672c\u8996\u89ba\u5316\u8207\u7d71\u4e00\u9810\u7b97\u7ba1\u7406\uff1b<\/p>\n<\/li>\n

      • \n

        \u4eab\u53d7\u8de8\u5e33\u6236\u7684\u6279\u91cf\u6298\u6263\uff1b<\/p>\n<\/li>\n

      • \n

        \u7c21\u5316\u8ca1\u52d9\u5831\u92b7\u548c\u6210\u672c\u6b78\u96c6\u6d41\u7a0b\u3002<\/p>\n<\/li>\n<\/ul>\n

        3. \u653f\u7b56\u63a7\u5236\uff08Service Control Policies, SCPs\uff09<\/strong><\/h5>\n

        \u900f\u904e SCP \u7b56\u7565<\/strong>\uff0c\u7ba1\u7406\u54e1\u53ef\u4ee5\u5728\u7d44\u7e54\u5c64\u7d1a\u8a2d\u5b9a\u6b0a\u9650\u908a\u754c\uff0c\u9650\u5236\u5b50\u5e33\u6236\u4e2d\u53ef\u5b58\u53d6\u7684AWS \u670d\u52d9\u6216\u64cd\u4f5c\u3002
        \u4f8b\u5982\uff0c\u53ef\u4ee5\u7d71\u4e00\u7981\u6b62\u6240\u6709\u5e33\u6236\u5275\u5efa\u672a\u52a0\u5bc6\u7684S3 \u5132\u5b58\u6876\uff0c\u6216\u7981\u6b62\u522a\u9664\u95dc\u9375IAM \u7528\u6236\uff0c\u5f9e\u800c\u5f37\u5316\u5b89\u5168\u8207\u5408\u898f\u3002<\/p>\n

        4. \u5e33\u6236\u81ea\u52d5\u5316\u5275\u5efa\u8207\u914d\u7f6e<\/strong><\/h5>\n

        \u501f\u52a9Organizations \u8207 AWS Control Tower<\/strong> \u6216 AWS CloudFormation StackSets<\/strong> \u96c6\u6210\uff0c\u4f01\u696d\u53ef\u5728\u65b0\u5e33\u6236\u5efa\u7acb\u6642\u81ea\u52d5\u90e8\u7f72\u6a19\u6e96\u5316\u914d\u7f6e\uff08\u5982\u5b89\u5168\u6027\u7fa4\u7d44\u3001\u65e5\u8a8c\u539f\u5247\u3001CloudTrail \u958b\u555f\u7b49\uff09\uff0c\u5927\u5e45\u6e1b\u5c11\u4eba\u5de5\u7dad\u904b\u5de5\u4f5c\u91cf\u3002<\/p>\n

         <\/p>\n

        \u70ba\u4ec0\u9ebc\u9078\u64c7AWS Organizations\uff1f<\/h4>\n
        1. \u5b89\u5168\u8207\u5408\u898f\u96c6\u4e2d\u7ba1\u63a7<\/strong><\/h5>\n

        \u900f\u904e\u7d71\u4e00\u7684\u7b56\u7565\u8207\u6b0a\u9650\u6a21\u578b\uff0c\u4f01\u696d\u53ef\u4ee5\u78ba\u4fdd\u6240\u6709\u5e33\u6236\u9075\u5faa\u76f8\u540c\u7684\u5b89\u5168\u6a19\u6e96\uff0c\u907f\u514d\u5b89\u5168\u6f0f\u6d1e\u548c\u7b56\u7565\u5206\u6563\u554f\u984c\u3002<\/p>\n

        2. \u6210\u672c\u6700\u4f73\u5316<\/strong><\/h5>\n

        \u96c6\u4e2d\u8a08\u8cbb\u6a21\u5f0f\u8b93\u7d44\u7e54\u66f4\u80fd\u7cbe\u6e96\u5730\u8ffd\u8e64\u6210\u672c\u4f86\u6e90\uff0c\u7d50\u5408AWS Cost Explorer\u3001Billing Conductor \u7b49\u5de5\u5177\uff0c\u5be6\u73fe\u8de8\u90e8\u9580\u3001\u8de8\u5c08\u6848\u7684\u6210\u672c\u5206\u6524\u3002<\/p>\n

        3. \u9748\u6d3b\u64f4\u5c55<\/strong><\/h5>\n

        \u7121\u8ad6\u4f01\u696d\u65b0\u589e\u591a\u5c11\u500b\u696d\u52d9\u55ae\u5143\u6216\u5c08\u6848\u5718\u968a\uff0c\u90fd\u53ef\u4ee5\u5728Organizations \u4e2d\u5feb\u901f\u5efa\u7acb\u4e26\u7d0d\u5165\u7ba1\u7406\u9ad4\u7cfb\uff0c\u4fdd\u6301\u67b6\u69cb\u4e00\u81f4\u6027\u3002<\/p>\n

        4. \u96c6\u4e2d\u6cbb\u7406\u8207\u53ef\u898b\u6027<\/strong><\/h5>\n

        \u7ba1\u7406\u8005\u53ef\u4ee5\u7d71\u4e00\u67e5\u770b\u6240\u6709\u5e33\u6236\u7684\u4f7f\u7528\u60c5\u6cc1\u3001\u7b56\u7565\u61c9\u7528\u8207\u5b89\u5168\u72c0\u614b\uff0c\u8b93\u96f2\u7aef\u6cbb\u7406\u66f4\u52a0\u6e05\u6670\u53ef\u63a7\u3002<\/p>\n

         <\/p>\n

        \u5178\u578b\u61c9\u7528\u5834\u666f<\/h4>\n
        \n
        \n\n\n\n\n\n\n\n\n
        \u5834\u666f<\/th>\n\u8aaa\u660e<\/th>\n<\/tr>\n<\/thead>\n
        \u96c6\u5718\u5316\u4f01\u696d\u7ba1\u7406<\/strong><\/td>\n\u96c6\u5718\u7e3d\u90e8\u900f\u904eOrganizations \u7ba1\u7406\u591a\u500b\u5b50\u516c\u53f8AWS \u5e33\u6236\uff0c\u7d71\u4e00\u6210\u672c\u8207\u5b89\u5168\u7b56\u7565\u3002<\/td>\n<\/tr>\n
        \u5c08\u6848\u88fd\u5718\u968a\u5354\u4f5c<\/strong><\/td>\n\u4e0d\u540c\u9805\u76ee\u7368\u7acb\u5e33\u6236\uff0c\u9632\u6b62\u6b0a\u9650\u4ea4\u53c9\uff1b\u900f\u904eSCP \u7d71\u4e00\u63a7\u5236\u5b89\u5168\u908a\u754c\u3002<\/td>\n<\/tr>\n
        \u91d1\u878d\u8207\u653f\u5e9c\u6a5f\u69cb\u5408\u898f\u7ba1\u63a7<\/strong><\/td>\n\u5728\u591a\u696d\u52d9\u7cfb\u7d71\u4e2d\u96c6\u4e2d\u57f7\u884c\u5b58\u53d6\u7b56\u7565\uff0c\u78ba\u4fdd\u7b26\u5408\u6cd5\u898f\u8981\u6c42\u3002<\/td>\n<\/tr>\n
        \u8a17\u7ba1\u670d\u52d9\u5546\uff08MSP\uff09\u5ba2\u6236\u7ba1\u7406<\/strong><\/td>\n\u4ee3\u7406\u5546\u53ef\u85c9\u52a9Organizations \u70ba\u5ba2\u6236\u5206\u5e33\u6236\u90e8\u7f72\u74b0\u5883\uff0c\u5be6\u73fe\u9694\u96e2\u8207\u96c6\u4e2d\u7ba1\u7406\u3002<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

         <\/p>\n

        \u6700\u4f73\u5be6\u8e10\u5efa\u8b70<\/h4>\n
          \n
        1. \n

          \u4f7f\u7528OUs \u5340\u5206\u74b0\u5883\u5c64\u7d1a<\/strong>\uff1a\u5982\u958b\u767c\u3001\u6e2c\u8a66\u3001\u751f\u7522\u74b0\u5883\u5206\u5c64\u7ba1\u7406\uff0c\u907f\u514d\u6b0a\u9650\u8aa4\u64cd\u4f5c\u3002<\/p>\n<\/li>\n

        2. \n

          \u5236\u5b9a\u57fa\u790eSCP \u7b56\u7565\u6a21\u677f<\/strong>\uff1a\u78ba\u4fdd\u6240\u6709\u65b0\u5e33\u6236\u81ea\u52d5\u5957\u7528\u5b89\u5168\u57fa\u7dda\u653f\u7b56\u3002<\/p>\n<\/li>\n

        3. \n

          \u7d50\u5408AWS Control Tower \u4f7f\u7528<\/strong>\uff1a\u5be6\u73fe\u591a\u5e33\u6236\u81ea\u52d5\u5316\u6cbb\u7406\u8207\u5feb\u901f\u90e8\u7f72\u3002<\/p>\n<\/li>\n

        4. \n

          \u555f\u7528AWS CloudTrail \u8207Config<\/strong>\uff1a\u5c0d\u6240\u6709\u5e33\u6236\u9032\u884c\u7d71\u4e00\u5be9\u8a08\u8207\u5408\u898f\u6aa2\u67e5\u3002<\/p>\n<\/li>\n

        5. \n

          \u900f\u904e\u4ee3\u7406\u5546\u7372\u53d6\u5c08\u696d\u652f\u6301<\/strong>\uff1a\u501f\u52a9AWS \u5b98\u65b9\u5408\u4f5c\u5925\u4f34\u7684\u7d93\u9a57\uff0c\u52a0\u901f\u591a\u5e33\u6236\u9ad4\u7cfb\u843d\u5730\u3002<\/p>\n<\/li>\n<\/ol>\n

           <\/p>\n

          \u5728\u96f2\u7aef\u4e0a<\/h4>\n

          \u4f5c\u70ba AWS \u5b98\u65b9\u6388\u6b0a\u4ee3\u7406\u5546<\/strong>\uff0c\u5728\u96f2\u7aef\u4e0a\uff08OnCloud\uff09<\/strong> \u9577\u671f\u70ba\u5ba2\u6236\u63d0\u4f9b\u5305\u62ec \u5e33\u6236\u67b6\u69cb\u898f\u5283\u3001Organizations \u7d71\u4e00\u7ba1\u7406\u90e8\u7f72\u3001\u5b89\u5168\u6027\u7b56\u7565\u6700\u4f73\u5316\u3001\u6210\u672c\u6cbb\u7406<\/strong> \u7b49\u5168\u65b9\u4f4d\u89e3\u6c7a\u65b9\u6848\u3002
          \u6211\u5011\u4e0d\u50c5\u5e6b\u52a9\u4f01\u696d\u5efa\u69cb\u5b89\u5168\u9ad8\u6548\u7684\u591a\u5e33\u6236\u9ad4\u7cfb\uff0c\u4e5f\u5354\u52a9\u4f01\u696d\u7533\u8acb AWS MDF \u884c\u92b7\u8cc7\u91d1<\/strong>\u3001\u5be6\u73fe AI \u61c9\u7528\u3001\u8cc7\u6599\u5206\u6790\u3001\u9077\u79fb\u73fe\u4ee3\u5316<\/strong> \u7b49\u696d\u52d9\u5275\u65b0\u3002<\/p>\n

           <\/p>\n

          \u603b\u7ed3<\/h4>\n

          \u5728\u591a\u5e33\u6236\u5df2\u6210\u70ba\u4f01\u696d\u4e0a\u96f2\u7aef\u4e3b\u6d41\u67b6\u69cb\u7684\u4eca\u5929\uff0cAWS Organizations<\/strong> \u4e0d\u50c5\u662f\u6280\u8853\u7ba1\u7406\u5de5\u5177\uff0c\u66f4\u662f\u4f01\u696d\u6578\u4f4d\u5316\u6cbb\u7406\u7684\u6838\u5fc3\u57fa\u77f3\u3002
          \u900f\u904e\u5408\u7406\u898f\u5283\u3001\u79d1\u5b78\u5206\u5c64\u8207\u7b56\u7565\u96c6\u4e2d\u63a7\u5236\uff0c\u4f01\u696d\u53ef\u4ee5\u5728\u5b89\u5168\u3001\u5408\u898f\u8207\u6210\u672c\u53ef\u63a7\u7684\u524d\u63d0\u4e0b\uff0c\u91cb\u653e\u96f2\u7aef\u904b\u7b97\u7684\u6700\u5927\u6f5b\u80fd\u3002<\/p>\n

          \n

          \u501f\u52a9AWS Organizations\uff0c\u8b93\u591a\u5e33\u6236\u4e0d\u518d\u662f\u8ca0\u64d4\uff0c\u800c\u662f\u53ef\u63a7\u7684\u6210\u9577\u52d5\u529b\u3002
          \u60f3\u8981\u4e86\u89e3\u5982\u4f55\u5feb\u901f\u5efa\u7acb\u60a8\u7684\u591a\u5e33\u6236\u7ba1\u7406\u7cfb\u7d71\uff1f\u6b61\u8fce\u806f\u7d61\u5728\u96f2\u7aef\u4e0aAWS \u5c08\u696d\u5718\u968a\uff0c\u5171\u5efa\u9ad8\u6548\u3001\u5b89\u5168\u3001\u53ef\u64f4\u5c55\u7684\u96f2\u7aef\u7d44\u7e54\u67b6\u69cb\u3002<\/p>\n<\/blockquote>","protected":false},"excerpt":{"rendered":"

          \u5728\u96f2\u7aef\u904b\u7b97\u898f\u6a21\u4e0d\u65b7\u64f4\u5f35\u7684\u4eca\u5929\uff0c\u4f01\u696d\u4f7f\u7528AWS \u7684\u67b6\u69cb\u4e5f\u65e5\u76ca\u8907\u96dc\u3002\u7121\u8ad6\u662f\u5927\u578b\u96c6\u5718\u7684\u591a\u696d\u52d9\u7dda\uff0c\u6216\u662f\u4e2d\u5c0f\u4f01\u696d\u7684\u591a\u5c08\u6848\u5354\u4f5c\u5834\u666f\uff0c\u5982\u4f55\u6709\u6548\u7387\u3001\u5b89\u5168\u5730\u7ba1\u7406\u591a\u500bAWS \u5e33\u6236\uff0c\u59cb\u7d42\u662fIT \u7ba1\u7406\u8005\u9762\u81e8\u7684\u91cd\u8981\u8b70\u984c\u3002
          \n\u70ba\u4e86\u89e3\u6c7a\u9019\u4e00\u75db\u9ede\uff0cAWS \u63a8\u51fa\u4e86AWS Organizations \u2014\u2014 \u4e00\u9805\u5c08\u70ba\u591a\u5e33\u6236\u96c6\u4e2d\u5316\u7ba1\u7406\u800c\u8a2d\u8a08\u7684\u670d\u52d9\u3002\u672c\u6587\u5c07\u5f9e\u529f\u80fd\u7279\u6027\u3001\u6838\u5fc3\u512a\u52e2\u3001\u61c9\u7528\u5834\u666f\u53ca\u6700\u4f73\u5be6\u52d9\u7b49\u89d2\u5ea6\uff0c\u5e36\u60a8\u5168\u9762\u4e86\u89e3AWS Organizations \u7684\u50f9\u503c\u3002<\/p>","protected":false},"author":1,"featured_media":4044,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[65],"tags":[],"class_list":["post-4043","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technical-sharing"],"_links":{"self":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/comments?post=4043"}],"version-history":[{"count":2,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4043\/revisions"}],"predecessor-version":[{"id":4046,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/posts\/4043\/revisions\/4046"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media\/4044"}],"wp:attachment":[{"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/media?parent=4043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/categories?post=4043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aws-oncloudai.com\/zh_hk\/wp-json\/wp\/v2\/tags?post=4043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}