Creating multiple sub accounts in IAM AWS

Question

I have a parent IAM account and I have multiple clients. I want to have multiple child account in AWS. I dont want the child account to see the resources in parent account and other child account.

How can I implement this?

Thanks

Answer 1

You can create multiple AWS accounts, and link them. You will have to do this with the master account root credentials, not an IAM account.

Full details are here:

Update, Q1 2017:

AWS has introduced Organizations, which lets you create a new account linked to your payer account. Organizations is also supported by the AWS CLI, so you can create new accounts programmatically, without needing the root credentials.

Answer 2

You can assume roles with temporary credentials to grant access between accounts, see http://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html