SCPs: The AWS Guardrails You Think You Understand

If you’ve spent any time designing multi-account AWS landing zones, you’ve written (or argued about) a Service Control Policy. They sit at…