UNDERSTANDING RCPS AND SCPS IN AWS: CHOOSING THE RIGHT POLICY FOR YOUR SECURITY NEEDS

Summary from the TLDR InfoSec newsletter

Resource Control Policies (RCPs) were introduced by AWS in late 2024 to restrict access to resources within your AWS organization. RCPs should be used when trying to enforce consistent security standards in supported services, you're running out of SCPs, or you want to use the NotResource condition. SCPs should be used when you want to apply a policy to services that are not supported by RCPs or use the NotAction condition.