I'm not a fan of AWS but to be fair it has all those features OOTB. You can have AWS "organizations" managing multiple accounts. IAM will allow to set up any p

I'm not a fan of AWS but to be fair it has all those features OOTB. You can have AWS "organizations" managing multiple accounts. IAM will allow to set up any policies you want in your organization. On the other hands side now you have a multitude of complexity added to your setup… If I would be snarky I would see a case of "resume driven development". But let's just assume it was lack of time to find the simplest solution and it's than often preferred to just go with the flock as so many others can't be possibly wrong.