Organizations

AWS IAM Identity Center: Account Access Is Now Optional — And Why That Matters

AWS IAM Identity Center now supports new organization instances without account access management enabled — no more service-linked role in every member account. When to use it, when to skip it, and the migration considerations for existing instances.

AWS SCPs That Actually Work: Practical Guide for Real Teams

SCPs every AWS org should deploy on day one — plus the break-glass pattern, limit gotchas, and why you shouldn’t use SCPs to fix human behavior.