Service control policies (SCPs) is a feature by AWS providing **a type of organization policy that you can use to manage permissions in your AWS Organization. SCPs offer central control over the maximum available permissions for all accounts in your organization, supporting Least Privilages across an org.
Explicit deny overrides any allows later levels
Topics
- Testing effects of SCPs
- Maximum size of SCPs
- Inheritance of SCPs in the OU hierarchy
- SCP effects on permissions
- Using access data to improve SCPs
- Tasks and entities not restricted by SCPs
- Creating, updating, and deleting service control policies
- Attaching and detaching service control policies
- Strategies for using SCPs
- SCP syntax
- Example service control policies