Skip to content

AWS Account Setup

Overview

New AWS accounts are created via AWS Organizations in the management account (640815619001). Each customer gets a dedicated account.

Steps

  1. Create the AWS account via AWS Organizations console in the management account
  2. Add to account.csv in raas/raas-aws-environment/ with the account ID, alias, region, and product
  3. Bootstrap IAM roles — run the bootstrap CloudFormation stack to create the standard RaaS IAM roles (Ansible SSM role, monitoring role etc.)
  4. Configure SSO access — add appropriate permission sets in IAM Identity Center so the team can access the account
  5. Update account registry — the account.csv change triggers downstream tooling

Tip

The account alias must follow the pattern {product}-customer-{code} (e.g. raas-customer-westherts). This is used throughout the tooling to identify accounts.