New featureMedium

AWS Sign-in now supports resource-based policies and resource control policies

AWS Sign-in supports resource-based policies and resource control policies for the AWS Management Console, allowing you to restrict console sign-in to expected networks. These policies can be applied organization-wide through AWS Organizations.

AWS Sign-in now supports resource-based policies and resource control policies (RCPs) for the AWS Management Console. These policies allow you to restrict console sign-in to expected networks. Policies are evaluated during sign-in and whenever the console session requests new credentials. Resource-based policies apply to individual AWS accounts, while resource control policies apply organization-wide through AWS Organizations. You can combine these policies with AWS Management Console Private Access to control both which networks users can sign in from and which accounts they can access. AWS Sign-in resource-based policies and RCPs are available at no additional cost in all AWS commercial Regions.

Read the original AWS announcement

Related articles and terms

Amazon CognitoA service that provides authentication, authorization, and user management for web and mobile applicationsDesigning Identity and Access Management - Achieving Zero Trust Security with IAMLearn access management design techniques with AWS IAM, including the principle of least privilege, policy design, and achieving zero trust security through Cognito integration.AWS Firewall ManagerA service for centrally managing firewall rules across your entire AWS OrganizationAWS IAMAn authentication and authorization service for securely controlling access to AWS resources, providing fine-grained access management through users, groups, roles, and policiesAWS IAM Identity CenterA single sign-on (SSO) service integrated with AWS Organizations that centrally manages access to multiple AWS accounts and business applications