AWS announced that its Resource Control Policies (RCPs), which centrally restrict permissions within organizations, now support Amazon Cognito and Amazon CloudWatch Logs resources. This allows organizations to implement consistent security boundaries and prevent unauthorized external access to these services.
RCPs enable administrators to enforce baseline security standards across accounts in an AWS organization, supporting better data and resource protection. The feature is available in all commercial and GovCloud AWS regions, although the effectiveness depends on organizational policy configuration and maintenance.
Source & further reading
AWS expands Resource Control Policies support for Cognito and CloudWatch Logs ↗Source published 2026-01-22. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.