Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Governance structureIntermediate

Cloud Account and Resource Hierarchy

Cloud account and resource hierarchies organize tenants, organizations, accounts, subscriptions, projects, folders, resource groups, and resources into manageable administrative boundaries.

What it means

The hierarchy controls policy inheritance, billing, identity scope, delegated administration, quotas, isolation, and the blast radius of mistakes or compromise.

Why it matters

A deliberate hierarchy makes ownership and policy understandable. An improvised hierarchy produces permission sprawl, weak cost attribution, and inconsistent controls.

Practical focus

  • Design the hierarchy around ownership and control boundaries
  • Separate production, development, security, and shared services appropriately
  • Apply policy at the highest safe level
  • Maintain an inventory of owners and lifecycle status

Common mistakes

  • Using one account or subscription for everything
  • Mirroring a temporary organization chart too literally
  • Moving resources without reviewing inherited policy

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

AWS Cloud PractitionerAzure FundamentalsGoogle Cloud Digital LeaderCompTIA Cloud+GIAC GCLDISC2 CCSPMicrosoft AZ-900

Authoritative sources