You're correct, Azure Resource Groups fall within Subscriptions.
Table 4 should probably say "Management Group" instead of "Resource Group".
Earlier in Section 4.1.1 (in the Security Guidance v5 document), it says "Microsoft Azure categorizes its structures into Tenant, Management Group, and Subscription".
Table 4 is correct for AWS and GCP.
The Azure, AWS and GCP hierarchies are covered in more details on the following web pages :
Azure : https://learn.microsoft.com/en-us/azure/governance/management-groups/overview .
AWS : https://docs.aws.amazon.com/organizations/latest/userguide/orgs_getting-started_concepts.html .
GCP : https://cloud.google.com/iam/docs/resource-hierarchy-access-control .
------------------------------
Guillaume Boutisseau
CISSP , CCSK Authorized Instructor , CCSP , CCAK
------------------------------
Original Message:
Sent: Aug 29, 2024 11:53:54 PM
From: Thomas Doe
Subject: CCSKv5 Hieracchical Structure for Cloud Resource Managemnt
CCSKv5 Study Guide Section 4.1.1 discusses the organizational structure of a cloud environment. It explains the various terminologies used by AWS, Google Cloud, and Azure, and displays their hierarchical structure in Figure 12.
For Azure, I think this structure is incorrect. Azure Resource Groups fall within Subscriptions (Organize your Azure resources effectively - Cloud Adoption Framework). Figure 12 however places Resource Groups in a higher level, and places Subscription within Resource Groups.
I don't have enough experience with AWS and GCP to say whether these have the same issue.
Am I misunderstanding something here?