Skip to content
Zoos GlobalZoos GlobalZoos EngineeringHub

AWS Cloud

Overview of Zoos Global AWS setup and account structure.

stableReferenceintermediateproductionawscloudaccounts
1 min readUpdated Jul 24, 2026@infra-teamCloud Infrastructure
Edit source

We use Amazon Web Services (AWS) as our primary cloud provider. This document explains our account organization, identity management, and resource deployment practices.

Account Structure

Section titled “Account Structure”

We use AWS Organizations to segment our environments and control access policies.

Zoos Global Organization
├── Root
    ├── Core OU (Shared Services, Logging, Security)
    ├── Workloads OU
        ├── Development Account
        ├── Staging Account
        ├── Production Account
    ├── Sandbox OU (Individual developer sandboxes)

Authentication & Access (IAM Identity Center)

Section titled “Authentication & Access (IAM Identity Center)”
  • Direct IAM user creation with long-lived credentials is strictly prohibited.
  • Access AWS accounts via AWS IAM Identity Center (successor to AWS Single Sign-On).
  • Users authenticate with their company credentials and assume short-lived IAM roles.
  • Multi-Factor Authentication (MFA) is mandatory for all access.

CLI Login Setup

Section titled “CLI Login Setup”

To authenticate your local terminal with AWS:

Terminal window
# Configure SSO profile
aws sso configure


# Login
aws sso login --profile zoosglobal-dev