AWS introduced resource-based policies affecting individual accounts and resource control policies applied organization-wide via AWS Organizations to restrict sign-in networks. These policies evaluate during login and credential refresh, enhancing access governance.
When combined with AWS Management Console Private Access, these controls specify permissible network origins and account access, increasing security posture across commercial AWS Regions without additional cost. The feature extends existing identity management capabilities rather than replacing them.
Source & further reading
AWS Sign-in now supports resource-based policies and resource control policies ↗Source published 2026-06-16. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.