INTRODUCING RESOURCE CONTROL POLICIES (RCPS) TO CENTRALLY RESTRICT ACCOUNT ACCESS

Summary from the TLDR InfoSec newsletter

Resource Control Policies is a new AWS feature that allows users to define a data perimeter in AWS Organizations by centrally restricting external access to AWS resources. RCPs complement SCPs, which offer central control over the maximum permissions of IAM users and roles by offering central control over the maximum resources on AWS resources. At launch, RCPs can apply to resources of the following AWS services: S3, STS, KMS, SQS, and Secrets Manager.