The FSF - Account Foundations is a consulting engagement to design the AWS Account model capable of enabling innovation while limiting risk by incorporating AWS best practices at every step. The Account Foundations solution leverages AWS Control Tower to orchestrate AWS account provisioning and account inflation process entirely through automation.

The Account Foundations includes:

• Core: Organizational Unit design with Shared Services, BU, and Workload accounts along with automated account inflation processing
• Network: Central Network with automated VPC provisioning
• Logging and Monitoring: Central SIEM with Security & Logging Dashboards
• Controls: Preventative and Detective controls with central Control Broker service
• Incident Response: Reactive controls with automated alerting and remediation
• Compliance: Automated auditing and compliance evaluation
• Identity: Central AWS user role management with AWS SSO and integration
• Infrastructure: Central Infrastructure catalog with Infrastructure Product Factory
• Pipelines: Core pipeline skeletons and Pipeline Factory

As an end state, the organization will have:

• Account and Organizational Unit strategy designed to limit blast radius through AWS Account segmentation by workload and/or Business Unit
• Accounts provisioned with identity, networking, and logging functionality
• Accounts provisioned with self-service access to core infrastructure and pipeline functionality
• Accounts provisioned with automated preventative, detective, and reactive controls