What is Service Control Policies?

Service Control Policies (SCPs) are a feature within AWS Organizations that allow administrators to centrally control the AWS services and actions that are available to accounts within an organization. SCPs are essentially permission guardrails that define the maximum permissions available to member accounts. They are commonly used to enforce security policies, ensure compliance, and prevent unintended or unauthorized actions within an AWS environment.