Overview Organizational Units (OUs) Group child accounts together Allow SCPs to be applied to multiple accounts Best practice: Group accounts by permission/policy requirements, rather than corporate structure