This would be great advice, but until AWS have a more solid story about resource sharing (to avoid duplicated costs for your usual boilerplate account infra) th

This would be great advice, but until AWS have a more solid story about resource sharing (to avoid duplicated costs for your usual boilerplate account infra) then you’ll quite quickly end up amalgamating accounts to reduce costs again, in my experience. RAM is getting there, but I tried this pattern again recently and ran headfirst into the problem of not being able to easily share a R53 zone between accounts without it descending into a mess of assume-role. I’m sold on the simplicity of small team accounts rather than larger accounts with complicated IAM policy though.