Adding a New Account

Adding a new AWS account is the most common operation in Org Kickstart. All account configuration lives in the accounts map in your tfvars file.

Steps

1. Add an entry to the accounts map in your tfvars file:

   accounts = {
     # ... existing accounts ...
   
     my_new_account = {
       account_name  = "my-org-new-account"
       account_email = "aws+new-account@example.com"
       parent_ou_name = "Workloads"
       monthly_budget_amount = 500
     }
   }
   

2. Plan and apply:

   make env=your-org tf-execute
   

   Or step-by-step to review the plan before applying:

   make env=your-org tf-plan
   make env=your-org tf-show
   make env=your-org tf-apply
   

Org Kickstart will create the AWS account, place it in the correct OU, assign SSO access, set alternate contacts, and apply any policies that target the parent OU.

Account Options

Notes

• The account_email must be unique across all AWS accounts globally
• New accounts are created by AWS Organizations and may take a few minutes to become available
• The Security Account is managed separately via the security_account block