Skip to content

Commit 92a5e3d

Browse files
authored
Merge pull request #39174 from pneedle-rh/test-update
Test update
2 parents 4eca298 + a9c6858 commit 92a5e3d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/rosa-aws-understand.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,6 @@
99
= Deployment Prerequisites
1010
To deploy {product-title} (ROSA) into your existing Amazon Web Services (AWS) account, Red Hat requires that several prerequisites are met.
1111

12-
Red Hat recommends the usage of AWS Organizations to manage multiple AWS accounts. The AWS Organizations, managed by the customer, host multiple AWS accounts. There is a root account in the organization that all accounts will refer to in the account hierarchy.
12+
Red Hat recommends the use of AWS Organizations to manage multiple AWS accounts. The AWS Organizations, managed by the customer, host multiple AWS accounts. There is a root account in the organization that all accounts will refer to in the account hierarchy.
1313

1414
It is a best practice for the ROSA cluster to be hosted in an AWS account within an AWS Organizational Unit. A Service Control Policy (SCP) is created and applied to the AWS Organizational Unit that manages what services the AWS sub-accounts are permitted to access. The SCP applies only to available permissions within a single AWS account for all AWS sub-accounts within the Organizational Unit. It is also possible to apply a SCP to a single AWS account. All other accounts in the customer’s AWS Organizations are managed in whatever manner the customer requires. Red Hat Site Reliability Engineers (SRE) will not have any control over SCPs within AWS Organizations.

0 commit comments

Comments
 (0)