AWS IAM Permissions Guardrails https://aws-samples.github.io/aws-iam-permissions-guardrails/
Terraform module to provision Service Control Policies (SCP) for AWS Organizations, Organizational Units, and AWS accounts
Combines AWS Organizations Service Control Policies (SCP)
Automated deployment and testing for AWS Service Control Policies
Awesome AWS service control policies (SCPs), Resource Control Policies (RCPs), and other organizational policies
Enables AWS Organizations Service Control Policies (SCP) with good defaults
repo for templates of AWS Service Control Policies
Detect IAM access misconfigurations in your AWS account using periodic dry runs.
Enterprise-grade AWS multi-account management with automated security, compliance, and cost controls. Features AWS Organizations, 11 SCPs, auto-remediation, and real-time compliance dashboards. Manages 50+ accounts with 95% reduction in security incidents.
Hands-on lab for AWS CSS Domain 6: Management & Security Governance. Covers multi-account setup, compliance detection with AWS Config, preventive guardrails with SCPs, enforcement with Systems Manager, auditing with CloudTrail.
Add a description, image, and links to the service-control-policies topic page so that developers can more easily learn about it.
To associate your repository with the service-control-policies topic, visit your repo's landing page and select "manage topics."