Enforcing enterprise-wide preventive controls with AWS Organizations
Patterns and reference architectures for deploying enterprise-wide preventive controls using AWS Organizations service control policies.
Logicata AWS Insiders Podcast - Season 4, Episode 37: SCPs now support full IAM language
Work independently cited and discussed by the AWS Insiders Podcast (Logicata) - a third-party industry podcast that selected the article as a notable AWS community contribution.
Preventive controls with AWS Organizations and VPC endpoint policies
How to layer AWS Organizations SCPs with VPC endpoint policies to enforce preventive security controls at scale.
How to import existing AWS Organizations SCPs and RCPs to CloudFormation
Step-by-step guidance for importing existing AWS Organizations service control policies and resource control policies into CloudFormation for infrastructure-as-code management.
Design a scalable service control policy strategy
A framework for designing and scaling AWS Organizations service control policies for enterprise-wide cloud governance.
Achieving operational excellence with design considerations for AWS Organizations SCPs
Design principles and operational best practices for building maintainable, scalable service control policy frameworks in AWS Organizations.
Get more out of service control policies in a multi account environment
Best practices for maximizing the effectiveness of service control policies across a multi-account AWS Organizations environment.
How and when to use different IAM policy types
Two workshop sessions with six hands-on labs teaching when to use each IAM policy type, who should own and manage them, and how to balance security posture with developer agility.
Getting more out of your service control policies, featuring Morgan Stanley
Advanced SCP patterns and governance strategies at enterprise scale, featuring Morgan Stanley's approach to multi-account identity governance.
How to be frugal with service control policies and get most out of them
Chalk talk on how to be frugal with service control policies and get the most out of them in a multi-account AWS environment.
Identity guide: Preventive controls with AWS Identity SCPs
A comprehensive guide to implementing preventive controls using AWS Identity service control policies at enterprise scale.