Introducing resource control policies (RCPs) to centrally restrict access to AWS resources

The article introduces Resource Control Policies (RCPs) in AWS Organizations, which allow centralized control over access to AWS resources across the organization's environment. RCPs help establish a data perimeter by restricting external access to resources.

Specifically, the article covers:

• RCPs apply to resources in services like Amazon S3, AWS Security Token Service, AWS Key Management Service, Amazon SQS, and AWS Secrets Manager.
• RCPs complement Service Control Policies (SCPs) by controlling maximum permissions on AWS resources, while SCPs control maximum permissions for IAM roles and users.
• AWS IAM Access Analyzer can help identify the impact of RCPs on resource permissions.
• RCPs are available in all AWS commercial regions, and more information can be found in the RCPs documentation.