https://pulumi.com logo
#general
Title
# general
c

chilly-photographer-60932

07/05/2019, 10:01 PM
Does pulumi have an option to create new
aws
accounts? I mean sub accounts?
b

broad-dog-22463

07/05/2019, 10:02 PM
no pulumi needs to have account credentials before it acts on your account
c

chilly-photographer-60932

07/05/2019, 10:03 PM
What I meant is that? If I have account credentials for the master account, then can it create sub accounts
b

broad-dog-22463

07/05/2019, 10:04 PM
I don't know what you mean by master account - do you mean if you have an aws root account will it make IAM Users?
if so, then yes
b

boundless-monkey-50243

07/05/2019, 10:05 PM
You might be able to bodge something together with AWS Landing Zone or whatever they’re calling it now, but in a normal AWS configuration there are manual steps to creating an AWS account.
b

broad-dog-22463

07/05/2019, 10:05 PM
that will generate you a user and their login credentials
@boundless-monkey-50243 maybe I'm mistaken then
I assumed it mean IAM user
b

boundless-monkey-50243

07/05/2019, 10:06 PM
New AWS accounts in your organization can be built with this: https://aws.amazon.com/controltower/
w

white-balloon-205

07/05/2019, 10:07 PM
If you want to create nested accounts - see https://www.pulumi.com/docs/reference/pkg/nodejs/pulumi/aws/organizations/#Account. This is much less common to automate in aws than “projects” in GCP though, and I suspect there are many limitations based on limited AWS support for this.
b

boundless-monkey-50243

07/05/2019, 10:07 PM
I don’t know how much API-driving stuff is available for it, and you’d have to write your own.
s

stocky-spoon-28903

07/05/2019, 10:08 PM
Was just about to post this - one notable issue is that you cannot destroy an account
Destroy will remove it from an organization but not actually close it
c

chilly-photographer-60932

07/05/2019, 10:21 PM
Thanks, that was helpful.