Use Account Types to group your accounts and apply Policies to ensure this collection of accounts remain within the guidelines you set.
Account Types can later be allocated to User Groups to manage AWS access for these accounts (see Groups for more information). Once allocated, you can easily manage AWS access for an Account Type.
All of these settings can be managed from the Manage Account Types page.
Before You Begin
- Estimated time to complete: 5 minutes
- You need to be an Admin for your Stax tenancy to manage Account Types
Navigate to the Manage Account Types Page
-
Log in to the Stax Console
-
Click Accounts in the left hand nav
-
Click Types in the sub-menu, beneath Accounts
Create an Account Type
From the Manage Account Types page:
-
Click + Create account type
-
Enter a Name for your new Account Type, then click Create account type
The Account Type will be created and is immediately available for having accounts assigned to it.
Edit an Account Type
From the Manage Account Types page:
-
Click the details button on the right side of the Account Type you wish to edit. This will open the Account Type details drawer
-
Click the edit icon at the top of the drawer
-
Input the new name then click Save
The change will be effective immediately.
Move Accounts Between Account Types
Move One Account
You can move one account by updating its details on the Accounts page.
-
Click Accounts in the left-hand nav
-
Click the vertical ellipsis (⋮) on the right side of the account you wish update, then click View details to open the Account details drawer
-
Click the edit icon at the top of the drawer
-
Select an Account Type from the dropdown, then click Save account
The update to the account may take a few minutes to complete.
Move Multiple Accounts
You can update the account type for multiple Stax-managed AWS accounts on the Account Types page.
-
Log in to the Stax Console
-
Click Accounts in the left hand nav
-
Click Types in the sub-menu, beneath Accounts
-
Click the Move accounts button on the right side of the Account Type you wish to edit
-
Each account within the Account Type will now have a checkbox to the left of its name. Select the account or accounts you wish to move, then choose the new Account Type from the Move drop-down list
-
Review the move and click Move accounts to confirm
The update to the account(s) may take a few minutes to complete.
Edit AWS Access for an Account Type
-
Log in to the Stax Console
-
Click Accounts in the left hand nav
-
Click Types in the sub-menu, beneath Accounts
-
Locate the Account Type whose access you wish to edit, then click the View Account Type Details button
-
Click the AWS ACCESS link in the drawer
-
Click the edit icon. You will see the list of Groups governing AWS access for accounts in this Account Type
-
Select the roles that users can assume when accessing AWS accounts within this Account Type (see AWS Access for more detail on each role)
-
Click Save
Attach or Detach a Policy
From the Policies page:
- Select a Policy from the list
- Click the edit icon beside Attached Account Types
- Check or uncheck the checkbox beside each Account Type to attach or detach the Policy
- Click Save
Delete an Account Type
- Remove all attached Accounts
- Remove all attached Policies
- Remove any role mappings that exist within your Groups for this Account Type
From the Manage Account Types page:
- Click the drawer icon on the right side of the Account Type
- Click the delete icon
- Click Yes, delete to confirm