<p>There is no direct equivalent to Management Groups in AWS.</p>
<p>You can achieve some of the same functionality by using <a href="https://aws.amazon.com/controltower/" rel="nofollow noreferrer">AWS Control Tower</a>, specifically around access controls.  I.e. you can set up groups and assign roles to any accounts in an AWS Organization on a per-account or per-group basis and have them deployed to child AWS accounts.</p>
<p>However, there is no such equivalent around, for example, resource allocation.</p>
<p>You can achieve some of the same functionality by using CloudFormation, or by using CT IAM policies policies with specific restrictions, but it's a much more convoluted process than with Azure.</p>

CC BY-SA 4.0
2021-01-25T09:01:38.823Z
2021-01-25T09:01:38.823Z
maplebird
<p><a href="https://en.wikipedia.org/wiki/Microsoft_Azure" rel="nofollow noreferrer">Microsoft Azure</a> has <a href="https://docs.microsoft.com/en-us/azure/governance/management-groups/overview" rel="nofollow noreferrer">Management Groups</a>. (They are a level above subscriptions that allow you to organize subscriptions into containers called &quot;management groups&quot; and apply your governance conditions to the management groups. )</p>
<p>When I studied for my AWS Associate Architect, I don't recall running across an equivalent concept. I'm trying to work out if <a href="https://en.wikipedia.org/wiki/Amazon_Web_Services" rel="nofollow noreferrer">Amazon Web Services</a> has an equivalent.</p>
<p>My question is: <strong>What is the AWS equivalent of Azure Management Groups?</strong></p>

<amazon-web-services><azure><management-groups>
What is the AWS equivalent of Azure Management Groups?
hawkeye
# What is the AWS equivalent of Azure Management Groups?

(Asked by: username_0 on 2021-01-24)

[Microsoft Azure](https://en.wikipedia.org/wiki/Microsoft_Azure) has [Management Groups](https://docs.microsoft.com/en-us/azure/governance/management-groups/overview). (They are a level above subscriptions that allow you to organize subscriptions into containers called "management groups" and apply your governance conditions to the management groups. )

When I studied for my AWS Associate Architect, I don't recall running across an equivalent concept. I'm trying to work out if [Amazon Web Services](https://en.wikipedia.org/wiki/Amazon_Web_Services) has an equivalent.

My question is: **What is the AWS equivalent of Azure Management Groups?**

**Tags:** amazon-web-services, azure, management-groups


---

## 1 answers

### Answer by username_1 on 2021-01-25. Score: 1 | Accepted answer

There is no direct equivalent to Management Groups in AWS.

You can achieve some of the same functionality by using [AWS Control Tower](https://aws.amazon.com/controltower/), specifically around access controls. I.e. you can set up groups and assign roles to any accounts in an AWS Organization on a per-account or per-group basis and have them deployed to child AWS accounts.

However, there is no such equivalent around, for example, resource allocation.

You can achieve some of the same functionality by using CloudFormation, or by using CT IAM policies policies with specific restrictions, but it's a much more convoluted process than with Azure.


---

