thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Cloud Computing · Advanced

Resource Control Policy (RCP)

AWS Organizations policy type that sets the maximum permissions on resources in member accounts, regardless of who requests access.

Definition

Introduced in 2024, RCPs complement SCPs: SCPs limit what your principals can do, while RCPs limit what can be done to your resources, including by principals outside the organization. They help enforce a data perimeter, for example ensuring S3 buckets are only accessible to identities within the organization.

Example

An RCP denies s3:* on all buckets unless aws:PrincipalOrgID equals the company's organization ID.

Exam tip

Use RCPs to block external access to resources organization-wide; use SCPs to restrict your own principals.

Related terms