Deploying to multiple accounts

Now, let’s begin working with multiple accounts. For this section, I’ve created two additional accounts in AWS Organizations: testing and production.

Important note

Since this book is not about Multi-Account Strategies (MAS), we’re not going to cover the creation of child accounts and Organizational Units (OUs) in this book. If you need to learn about these, then you can start looking at AWS Organizations (https://aws.amazon.com/organizations/). If you don’t use a MAS and don’t plan to, then you may skip this section.

Since we will work in various accounts, we need to tweak our StackSet permissions template. We’ve separated it into two templates—one for an administrator role and one for an execution role. We don’t need to create an execution role in our main (or to use the terms of AWS, our payer) account, because no stack instance will be created in it.

Our StackSet administrator role...