From 1b616b42156bed226122a0670a06f742f4242c71 Mon Sep 17 00:00:00 2001 From: Luciano Mammino Date: Thu, 1 Feb 2024 10:55:01 +0000 Subject: [PATCH] Added ep 112 --- .../112-what-is-a-service-control-policy.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 src/episodes/112-what-is-a-service-control-policy.md diff --git a/src/episodes/112-what-is-a-service-control-policy.md b/src/episodes/112-what-is-a-service-control-policy.md new file mode 100644 index 0000000..987e09e --- /dev/null +++ b/src/episodes/112-what-is-a-service-control-policy.md @@ -0,0 +1,18 @@ +--- +episode: 112 +title: "What is a Service Control Policy (SCP)?" +youtube_id: "vBoLC2oSUPo" +spotify_link: "https://podcasters.spotify.com/pod/show/aws-bites/episodes/112--What-is-a-Service-Control-Policy-SCP-e2f4ick" +publish_date: 2024-02-02 +--- + +In this episode, we provide a friendly introduction to Service Control Policies (SCPs) in AWS Organizations. We explain what SCPs are, how they work, common use cases, and tips for troubleshooting access-denied errors related to SCPs. We cover how SCPs differ from identity-based and resource-based policies, and how SCPs can be used to set boundaries on maximum permissions in AWS accounts across an organization. + +> AWS Bites is sponsored by fourTheorem, an AWS Partner with plenty of experience setting up AWS accounts and Service Control Policies. If that's something you'd like some help with, reach out to us on social media or check out [fourtheorem.com](https://fourtheorem.com)! + + +In this episode, we mentioned the following resources. + +- Episode 96: ["AWS Governance and Landing Zone with Control Tower, Org Formation, and Terraform"](/96-aws-governance-and-landing-zone-with-control-tower-org-formation-and-terraform/) +- Episode 40: ["What do you need to know about IAM?"](/40-what-do-you-need-to-know-about-iam/) +- Conor Maher's repo with some [SCP examples](https://github.com/conzy/terraform-demo)