Service Control Policies

SCP – Service Control Policies

JSON

SCPs does not affect management accounts
They limit what account itself including root user can do
They don’t grant permissions
Deny list/Allow list – you choose which way

Two a service to be allowed it must be allowed in both services.