AWS IAM launches new VPC endpoint condition keys for network perimeter controls

AWS IAM has introduced three new global condition keys to enhance network perimeter controls for AWS resources:

• aws:VpceAccount - Controls access through VPC endpoints at the account level
• aws:VpceOrgPaths - Provides control at the organization path level
• aws:VpceOrgID - Enables controls at the entire organization level

Key benefits of these condition keys include:

• Automatic scaling with VPC usage
• No need to manually update policies when adding/removing VPC endpoints
• Compatible with existing service control, resource control, resource-based, and identity-based policies
• Supported across select AWS services in commercial regions with PrivateLink

These new condition keys provide granular network perimeter controls for enhanced AWS resource security.