Introducing resource control policies (RCPs), a new type of authorization policy in AWS Organizations

This article introduces resource control policies (RCPs), a new type of authorization policy in AWS Organizations that can restrict external access to resources at scale.

Specifically, the article covers:

• What RCPs are and how they differ from service control policies (SCPs)
• How to enable and create RCPs in the AWS Organizations console
• An example of creating an RCP to restrict access to S3 buckets to only principals within the organization
• How to attach and test RCPs
• Using RCPs with AWS Control Tower for large-scale deployment and drift detection
• The role of RCPs in establishing a data perimeter and comprehensive security baseline alongside SCPs