mediumAmazon & AWSTCSInfosys

SCPs sit above every account in the organisation. What are they actually for, and where do teams get burned?

Service control policies cap what anyone in a member account can do, no matter what their IAM admins wrote. The craft is choosing a handful of denials that age well.

Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Service control policies cap what anyone in a member account can do, no matter what their IAM admins wrote. The craft is choosing a handful of denials that age well.

28 answers per topic instead of 18, and your progress kept · no cardor unlock all 401 remaining answers · ₹2,000 / $25

UP NEXT ON YOUR JOURNEY

Next in this trackVPC Endpoints vs a NAT Gateway Next in this trackRoute 53 Resolver and Hybrid DNS Next in this trackCloudFront OAC and Signed URLs

NOTES & DISCUSSION · 0

Nothing here yet. Say how you would answer it.