Two paired references for standing up an AWS organization from scratch and giving it a working CI/CD pipeline. Written for a small team that wants production-grade isolation without operational overhead.
| File | What it covers |
|---|---|
aws_multi_account_strategy.md |
Account/OU layout under AWS Control Tower (Security, Infrastructure, Workloads, Sandbox), IAM Identity Center for SSO with a non-destructive migration path to Microsoft Entra ID, SCPs to apply per OU, and a setup order. |
aws_cicd_github_codepipeline.md |
End-to-end CI/CD reference build: GitHub → CodeStar Connection → CodePipeline → CodeBuild → ECR → cross-account deploy to CodeDeploy. Ships full Ansible playbooks and CloudFormation templates with four configurable egress modes (NoVpc, PublicSubnet, NatInstance, NatGateway). |