Overview

Create temporary sandbox environments with configurable security and spend monitoring controls

The Sandbox Studio solution allows cloud administrators to set up and recycle temporary sandbox environments by automating the implementation of security and governance policies, spend management mechanisms, and account recycling preferences through a web user interface (UI). Using the solution, customers can empower their teams to experiment, learn, and innovate with AWS services in production-isolated AWS accounts that are recycled after use.

Note: The solution does not create any new, or close AWS accounts; it only allows you to manage and monitor existing AWS accounts for sandbox experiments, and recycles accounts to promote reuse.

The solution automates the setup of a sandbox Organizational Unit (OU) structure that comes preconfigured with best practices for workload isolation, by automatically deploying a standard set of policies, guardrails, and controls across sandbox accounts. The solution:

• Enables cost optimization by sending alerts and initiating automated actions when spend reaches budget threshold limits.
• Enables account recycling by providing the ability to use accounts for a predefined duration or spend threshold, and cleaning up the account at the end of its sandbox use.
• Limits and controls excessively expensive, or sensitive actions within sandbox accounts.

This implementation guide provides an overview of the Sandbox Studio solution, as architecture overview, considerations for planning the deployment, and configuration steps for deploying the solution to the AWS Cloud. It is intended for solution architects, DevOps engineers, AWS account administrators, and cloud professionals who want to implement Sandbox Studio in their environment.