5. 組織管理

対象サービス

• AWS Organizations
• AWS Control Tower*
• AWS CloudFormation*

*試験ガイド内の"AWSのサービスと機能"には記載なし

AWS Organizations

Organizationでのアクセス制限
https://d1.awsstatic.com/webinars/jp/pdf/services/20180214_AWS-Blackbelt-Organizations.pdf

AWS Control Tower

https://pages.awscloud.com/rs/112-TZM-766/images/20220428_17th_ISV_DiveDeepSeminar_Control_Tower.pdf

AWS CloudFormation

https://d1.awsstatic.com/webinars/jp/pdf/services/20200826_AWS-BlackBelt_AWS-CloudFormation.pdf

CloudFormationのアップデートスタックの制限

https://dev.classmethod.jp/articles/disable-update-stack/
https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html

Guard

https://dev.classmethod.jp/articles/cloudformation-guard-ga/
https://docs.aws.amazon.com/ja_jp/cfn-guard/latest/ug/what-is-guard.html

サービスロール

https://dev.classmethod.jp/articles/tsnote-cloudformation-create-servicerole-001/
https://docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/using-iam-servicerole.html