Getting started with upgrade rollout policies - AWS Organizations
Before you beginImplementation steps

Getting started with upgrade rollout policies

Follow these steps to implement upgrade rollout policies in your organization. Each step links to detailed information to help you complete the implementation successfully.

Before you begin

Ensure you have the following:

  • Administrative access to AWS Organizations

  • Resources in supported AWS services (such as Aurora or Amazon Relational Database Service)

  • Necessary IAM permissions configured

Implementation steps

  1. Enable upgrade rollout policies for your organization.

  2. Understand how upgrade rollout policies work.

    • Identify development, testing, and production environments

    • Determine which resources should be upgraded first, second, and last

    • Document your tagging strategy for resource identification

  3. Create a upgrade rollout policy:

    • Define the default rollout order (organizational unit or account level)

    • Specify resource targeting using tags

    • Configure any policy exclusions

  4. Attach an upgrade rollout policy to a single member account that you can use for testing.:

    • Start with a test organizational unit

    • Verify policy inheritance

    • Confirm policy attachment status

  5. Tag your resources according to your upgrade order strategy:

    • Apply tags to development resources for first upgrades

    • Tag testing resources for second-order upgrades

    • Designate production resources for last-order upgrades

  6. Monitor and validate the policy:

    • Generate an account status report

    • Review upgrade order assignments

    • Verify policy effects on test resources

  7. Test the upgrade process:

    • Wait for a service upgrade to become available

    • Monitor the upgrade progression through your environments

    • Verify that upgrades follow your specified order

  8. Enable upgrade rollout policies for additional organizational units as needed

Other information