Account Consolidation

[data-sync-user]

5 of the 7 AWS accounts do not contain any resources identified as being required/not handled by other recommendations. These accounts are:

• Community
• Deprecated
• Ops
• Sandbox
• Secure

We recommend that:

1. (MoFo) These accounts are reviewed for any archival content that requires preservation
2. (STX) Anything requiring archival is moved to Everything
3. (MoFo) The accounts are shut down and associated LDAP/SSO links are removed

This will leave two accounts; Everything and Projects. 

Considering Mozilla Foundation’s reduced usage of AWS, it is suggested that consolidation into a single account is pursued. This will involve first following all of the above recommendations, and then moving any remaining buckets and Route 53 zones into a single account, removing the remaining unused account (STX).

┆Issue is synchronized with this Jira Story

[data-sync-user]

➤ Hubert Ostrowski commented:

Simon Acosta Torres Sandbox account is ready to be deleted

[data-sync-user]

➤ Simon Acosta Torres commented:

Tyler Denton Adding you for visibility, 1 of the accounts is ready for deletion. I would prefer if we delete them all at once as soon as Hubert’s done with his investigation, but it’s good to know that we have one less to worry about.

[data-sync-user]

➤ Tyler Denton commented:

Thanks Simon Acosta Torres!

{quote}I would prefer if we delete them all at once{quote}

What’s the reasoning behind this? Any obstacles to be aware of?

[data-sync-user]

➤ Simon Acosta Torres commented:

I was just thinking that it might be best to have all the context on what to do with all of them and how to migrate whatever might need to be move before starting with the cleanup. Although Sandbox seems a pretty safe bet on what to remove first.

[data-sync-user]

➤ Hubert Ostrowski commented:

To be fair, I’d take care of each account separately. Getting all resources figured out, deleted or moved, then getting rid of the account and moving forward to another. Some of them like sandbox or deprecated are not as hard as the others to take care of. We could use them as ‘learning projects’ that will give us some experience on how to deal with more complex issues. In other words, I’d clean and delete accounts one by one so that we know context of the changes and possible errors

[data-sync-user]

➤ Simon Acosta Torres commented:

Hubert Ostrowski That does sounds like a good approach and really, sandbox would be a great option as a learning project as you mentioned. In that case, we could get started removing sandbox.