One AWS account is a useful starting point. A well-designed account portfolio is how a growing team gives workloads room to move without giving risk room to spread.