Source: towardsthecloud.com
Example SCP: Deny access to AWS in unsupported regions
This SCP restricts the use of AWS services in unsupported AWS Regions. This is very useful if you only deploy to a single AWS region. By revoking access to other AWS regions you'll effectively limit the blast radius in the event of a security breach.
Related Articles
Community Partners
DevOps Careers