We are just starting our AWS presence. We require multiple VPCs, each hosting our own servers or customers' servers. Each VPC has 4 subnets - 2 public, 2 private, each in a different AZ. Each VPC has 7 or more EC2 instances.
We manage this through the AWS web console. However, even with 2 VPCs each developer can see all the EC2 instances and all the subnets and it is becoming a bit of a mess. Ideally, we would like to use IAM to restrict visibility of the VPC, but I can't find the ARN of a VPC. Does this exist?
Or should we create a separate AWS account for each VPC to keep things separate? But then how do you manage the users?