Microsoft Azure has Management Groups. (They are a level above subscriptions that allow you to organize subscriptions into containers called "management groups" and apply your governance conditions to the management groups. )

When I studied for my AWS Associate Architect, I don't recall running across an equivalent concept. I'm trying to work out if Amazon Web Services has an equivalent.

My question is: What is the AWS equivalent of Azure Management Groups?

1 Answer 1


There is no direct equivalent to Management Groups in AWS.

You can achieve some of the same functionality by using AWS Control Tower, specifically around access controls. I.e. you can set up groups and assign roles to any accounts in an AWS Organization on a per-account or per-group basis and have them deployed to child AWS accounts.

However, there is no such equivalent around, for example, resource allocation.

You can achieve some of the same functionality by using CloudFormation, or by using CT IAM policies policies with specific restrictions, but it's a much more convoluted process than with Azure.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.