AWS makes it pretty easy to setup an account so you can start solving problems pretty quickly. Unfortunately, they don’t warn you about what happens when you start getting requests for more access to that account and more assets in that account. Believe it or not, there is actually a best practice when it comes to AWS account management and it is indeed both an art and a science - and it doesn’t involve tagging. In this talk, we will take a look at AWS Landing Zone and the philosophy behind it. We will also discuss about how to best segment your primary account as well as why it may make sense to put every environment, from every project, into its own account. Seriously.