Status: IN
SCPs (Service Control Policies) and RCPs (Resource Control Policies) do not grant permissions — they only restrict; identity-based or resource-based policies are still required to grant access.
Source: entries/2026/03/08/iam-best-practices.md
JSON