Does pulumi have an option to create new `aws` acc...
# general
c
Does pulumi have an option to create new
aws
accounts? I mean sub accounts?
b
no pulumi needs to have account credentials before it acts on your account
c
What I meant is that? If I have account credentials for the master account, then can it create sub accounts
b
I don't know what you mean by master account - do you mean if you have an aws root account will it make IAM Users?
if so, then yes
b
You might be able to bodge something together with AWS Landing Zone or whatever they’re calling it now, but in a normal AWS configuration there are manual steps to creating an AWS account.
b
that will generate you a user and their login credentials
@boundless-monkey-50243 maybe I'm mistaken then
I assumed it mean IAM user
b
New AWS accounts in your organization can be built with this: https://aws.amazon.com/controltower/
w
If you want to create nested accounts - see https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/aws/organizations/#Account. This is much less common to automate in aws than “projects” in GCP though, and I suspect there are many limitations based on limited AWS support for this.
b
I don’t know how much API-driving stuff is available for it, and you’d have to write your own.
s
Was just about to post this - one notable issue is that you cannot destroy an account
Destroy will remove it from an organization but not actually close it
c
Thanks, that was helpful.