iam-scps-rcps-restrict-only-no-grant

Status: IN

SCPs (Service Control Policies) and RCPs (Resource Control Policies) do not grant permissions — they only restrict; identity-based or resource-based policies are still required to grant access.

Source: entries/2026/03/08/iam-best-practices.md

JSON