AWS account is a member of an active AWS Organization
organizations_account_part_of_organizations
AWS account membership in AWS Organizations with organization status ACTIVE.
Assesses if the account is associated with an organization and that the organization state is ACTIVE.
Risk
Absence of AWS Organizations weakens governance across accounts. Without SCP guardrails and centralized policy, excessive permissions, unsafe network settings, or risky services may be enabled, threatening confidentiality and integrity. Fragmented logging and response slow containment, impacting availability and increasing cost exposure.
prowler aws --checks organizations_account_part_of_organizations
Recommendation
Operate all accounts under AWS Organizations (preferably with all features). Structure OUs, enforce SCPs for least privilege, and apply separation of duties between management and member accounts. Centralize logging and billing to support defense-in-depth, and routinely review org membership and policies.
Remediation
aws organizations create-organization
- Sign in to the AWS Management Console with the account to remediate
- Open the AWS Organizations console
- Click "Create an organization"
- Confirm to create (default is All features)
- Verify the organization status shows Active on the Settings page
Source Code
Resource Type
Other