3 ms·

There is a practical problem: AWS has a very restrictive policy for deleting sub-accounts. From: https://docs.aws.amazon.com/organizations/latest/APIReference/

There is a practical problem: AWS has a very restrictive policy for deleting sub-accounts. From: https://docs.aws.amazon.com/organizations/latest/APIReference/API_CloseAccount.html https://docs.aws.amazon.com/organizations/latest/APIReferenc... "You can only close 10% of active member accounts within a rolling 30 day period. This quota is not bound by a calendar month, but starts when you close an account. Within 30 days of that initial account closure, you can't exceed the 10% account closure limit." I have create so many accounts that when I had to erase them I was stuck in this stupid limit.

rcrowley 4y ago
This is a bummer, yes. I haven’t looked but I wonder if that 10% is a soft limit. At any rate, this is a good reason to use accounts for architectural divisions, not teams, and certainly not individual engineers.
nijave 4y ago
Somewhere I worked used to just run awsnuke and move them to a "deleteme" OU. I guess that's an option if you're okay with a bunch of empty accounts (they have a few hundred in there)