Using Service Control Policies to Control Blast Radius

In general, i recommend that both identity and resource policies for an application, leve with the application. And so no, if you're adding a dynamo d b table that needs inscription, there's probably some application code that's going to be using. You can use things like service control policies to control blast radius. Te service control policies are defined at the organization level, but apply to individual accounts.

Transcript

Play full episode

Remember Everything You Learn from Podcasts

Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.