Transfer AWS accounts between AWS Organizations while preserving AWS Lake Formation permissions

This article explains how to migrate AWS accounts between organizations while preserving AWS Lake Formation permissions using new AWS features.

• AWS Organizations now supports direct account transfers between organizations without standalone phase
• New AWS RAM RetainSharingOnAccountLeaveOrganization parameter keeps resource shares active during migration
• Solution uses temporary "bridge shares" to maintain Lake Formation data access during account movement
• Four-step process: create bridge shares, migrate accounts, restore original shares, delete bridge shares
• Requires IAM roles with specific permissions and Lake Formation administrator access
• Python Boto3 scripts provided for automating the migration workflow
• Post-migration validation recommended to verify permissions and data access functionality

This approach enables seamless account migrations across organizations for mergers, acquisitions, or restructuring without disrupting data access or analytics workloads.