AWS IAM 组和组织单位有什么区别? [英] What is the difference between an AWS IAM Group and an Organizational Unit?

问题描述

我正在调查 AWS 中的用户和组，但对 AWS IAM 组和组织单位有一些困惑.它们似乎都实现了相同的功能，例如组织具有相似任务的类似帐户并将策略分配给帐户组.有什么区别?任何进一步的见解将不胜感激.

I'm investigating users and groups in AWS and have some confusion regarding an AWS IAM Group and an Organizational Unit. They both seem to implement the same functionality such as organizing like accounts with similar tasks and assigning policies to groups of accounts. What are the differences? Any further insight would be appreciated.

推荐答案

IAM 组是 IAM 用户的集合，而 OU 是 AWS 账户的组.

An IAM group is a collection of IAM users, while an OU is a group of AWS accounts.

这篇关于AWS IAM 组和组织单位有什么区别?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！