What Are AWS Service Control Policies (SCP)? A Complete Guide

Originally published by Sonrai Security.
Written by Tally Shea.
The cloud is all about innovation at a speed never before possible. This can often lead to rapid development sprints and a proliferation of identities and infrastructure – and with that, excessive privilege. In large scale enterprises, IAM governance can be difficult. To accommodate this, Amazon Web Services (AWS) created Service Control Policies. The following guide will:

Define what a Service Control Policy (SCP) is.
...

aws can cloud control development enterprises governance guide iam identities infrastructure innovation large policies privilege proliferation rapid scale scp security service service control policies sonrai sonrai security speed written