Creating an organization
You can create an organization that starts with your AWS account as the management account. When you create an organization, you can choose whether the organization supports all features (recommended) or only consolidated billing features.
After creating an organization, you can add accounts to your organization in these ways from the management account:
-
Create other AWS accounts that are automatically added to your organization as member accounts
-
After verifying your email address, invite existing AWS accounts to join your organization as member accounts
Create an organization
You can create an organization by using either the AWS Management Console or by using a command from the AWS CLI or one of the SDK APIs.
To create an organization with your current AWS account, you must have the following permissions:
-
organizations:CreateOrganization
-
iam:CreateServiceLinkedRole
You can restrict this permission to only the service principal
organizations.amazonaws.com
.
Now you can add additional accounts to your organization as follows:
-
To create an AWS account that automatically becomes part of your AWS organization, see Creating an AWS account in your organization.
-
To invite an existing account to your organization, see Inviting an AWS account to join your organization.
Email address verification
After you create an organization and before you can invite accounts to join, you must verify that you own the email address provided for the management account in the organization.
When you create an organization, if the management account has not been previously verified, AWS automatically sends a verification email to the specified email address. There might be a delay before you receive the verification email.
Within 24 hours, follow the instructions in the email to verify your email address.
If you don't verify your email address within 24 hours, you can resend the verification request so that you can invite other AWS accounts to your organization. If you don't receive the verification email, check that your email address is correct and, if necessary, modify it.
-
To find out what email address is associated with your management account, see Viewing the details of an organization from the management account.
-
To change the email address that is associated with your management account, see Managing an AWS account in the AWS Billing User Guide.
If you change the email address of the management account, the account's status reverts to "email unverified," and you must complete the verification process for your new email address.
If you invited accounts to join your organization before you changed the management account's email address and those invitations have not yet been accepted, they can’t be accepted until you verify the management account’s new email address. Use the previous procedure to resend the verification request. After you complete the process by responding to the email, your invited accounts can accept the invitations.