Best practices for managing Customer workload

Question

Hi There,

I have created API Gateway, Lambda, and S3 for a customer workload for a non-prod environment and now the customer wants for production deployment so I have created a new AWS account for the same using AWS organization and wants to deploy the production workload on the same account.
The reason I created a separate AWS account is that I want all the bills to be triggered to the customer's email at the end of the month and he pays the full bill by himself.
I also want to ensure that the workload deployed in the Customer's AWS account doesn't add to my account bills.
Can you let me know the best practices to be followed for the above use case?

nobledoh · Answer

You did good by managing the customers workload in separate AWS accounts using AWS organizations.

You can implement IAM roles with the least privilege principle and cross-account access for secure management. Another good practice would be to enable monitoring and logging. Set up billing alerts and educate this guy on cost management tools and security best practices like identity federation and encryption.

Make sure you document and provide this to him and another good idea is to recommend AWS support plans for ongoing management if you don't plan on sticking around.

Best practices for managing Customer workload

Add your answer

Relevant content