1. AWS provides the root or system privileges only for a limited set of services, which includes

   1. Elastic Cloud Compute (EC2)

   2. Elastic MapReduce (EMR)

   3. Elastic BeanStalk

   4. Opswork

2. AWS does not provide root privileges for managed services like RDS, DynamoDB, S3, Glacier etc

3. For RDS, if you need Admin privileges or want to use features not enabled by RDS, you can go with the Database on EC2 approach.

4. Access Control Tags

• Tags can be used as a condition in an access policy statement to control access to resources for e.g. Deny Delete Permission based on Tags

5. Resource Groups

• A Resource Group is a collection of resources that share one or more tags.

• Resource groups helps combine information for multiple resources and services on a single screen for e.g. for a Dev Tag there might be multiple resources for ELB, EC2 and RDS. Using Resource Groups all the resources and their status can be views on a single page

6. Tag Editor

• Tag Editor allows addition of tags to multiple resources at once

• Tag Editor allows searching of resources using tags and then add, edit, remove tags for these resources

AWS provides Four Support tiers and is per AWS Account (except Enterprise)

• • Basic

    • • Customer Service: one-on-one responses to account and billing questions

      • Support forums

      • Service health checks

    • Documentation, whitepapers, and best-practice guides

• • Developer

    • • All the features from Basic Support Tier

      • Best-practice guidance

      • Client-side diagnostic tools

    • Building-block architecture support: guidance on how to use AWS products, features, and services together

• • Business

    • • Phone/Email/Chat support, 1 hour response time

      • All the features from Developer Support Tier

      • Use-case guidance: what AWS products, features, and services to use to best support your specific needs

      • IAM for controlling individuals’ access to AWS Support

      • AWS Trusted Advisor, which inspects customer environments and identifies opportunities to save money, close security gaps, and improve system reliability and performance

      • An API for interacting with Support Center and Trusted Advisor, allowing for automated support case management and Trusted Advisor operations

    • Third-party software support: help with EC2 instance operating systems as well as the configuration and performance of the most popular third-party software components on AWS

• Enterprise

  • • 15 min response time, dedicated Technical Account Manager

    • All the features from Business Support Tier

    • Application architecture guidance: consultative partnership supporting specific use cases and applications

    • Infrastructure event management: short-term engagement with AWS Support to partner with your technical and project resources to gain a deep understanding of your use case and provide architectural and scaling guidance for an event

    • AWS Concierge

    • Technical account manager

    • White-glove case routing

  • Management business reviews