Ravi Sir's Cards › AWS
Do SCPs grant access?
This interview card answers: Do SCPs grant access? No. SCPs only set the maximum allowed permissions ceiling for members. Users still need IAM permissions inside the account. Allow EC2 in SCP but no IAM policy , then user still cannot run instances.
Read card text
What this card says
What it is
No. SCPs only set the maximum allowed permissions ceiling for members.
ceiling
Why it matters
Users still need IAM permissions inside the account.
How / example
Allow EC2 in SCP but no IAM policy → user still cannot run instances.