awesome-service-control-policies

Awesome AWS service control policies (SCPs) and organizational policies in general (service control, ai opt out, backup, tagging)

Inspired by many other awesome lists!

terraform modules

service control policies

• ScaleSec/terraform_aws_scp
• trussworks/terraform-aws-ou-scp
• cloudposse/terraform-aws-service-control-policies
• Appsilon/terraform-aws-ou-scp
• timurgaleev/terraform-aws-organization-scp
• welldone-cloud/aws-scps-for-sandbox-and-training-accounts

IAM helpers

• phzietsman/terraform-aws-policy-packer - reduce size of IAM policy

policy stores

• primeharbor/aws-service-control-policies
• https://asecure.cloud/l/scp/

reference architecture

• aws-samples/aws-scps-with-terraform

blogs

• https://towardsthecloud.com/aws-scp-service-control-policies
• https://www.stormit.cloud/blog/aws-scp-service-control-policy
• https://medium.com/gft-engineering/more-about-aws-service-control-policies-scp-1588ff9bc814
• Jun 17 2022 - More about AWS Service Control Policies (SCP)
• Mar 25, 2020 - AWS SCP Best Practices

references

• https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps.html
• https://docs.aws.amazon.com/organizations/latest/userguide/orgs_reference_limits.html#min-max-values
• Terraform and OpenTofu registry search