I've decided to get AWS Architect Certified during this slow season of COVID isolation. I have a filled-out shell of a decent AWS stack in https://azri.us and now it's time to make it full pro, starting with security.
I ran AWS Control Tower on the site to lay the foundation for strong security infrastructure.
Guardrails for Governance to Prevent and Detect Nefarious Activities
Root, Core, and Custom Organizational Units
Audit, log, and root accounts enrolled in the control tower
Account factory for automated account provisioning
AWS SSO default directory and single sign-on
Landing zones for an Azrius Organization
I did incur a cost for the two new accounts. Will be tracking to see if these costs are recurring and get to the bottom of it. It isn't huge, but going from a daily cost of $0.15 to $0.86 per day is a significant increase.