How do Service Control Policies (SCPs) in AWS Organizations differ from IAM policies in terms of scope and enforcement?

Question

Lingesh Kumar K · Accepted Answer

Service Control Policies (SCPs) in AWS Organizations define the maximum permissions for accounts across the organization or OUs, applying at an account level, while IAM policies grant specific permissions to users, groups, or roles within a single account; SCPs cannot grant permissions, only restrict them.

How do Service Control Policies (SCPs) in AWS Organizations differ from IAM policies in terms of scope and enforcement?

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community available in

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community available in