Amazon Neptune integrated tag-based access control (TBAC) for IAM policies and Service Control Policies, allowing permissions to be conditioned on matching resource and principal tags. This approach supports scalable management of access boundaries without enumerating specific cluster ARNs, aiding multi-team and multi-project environments.
TBAC helps enforce isolation across projects and teams by restricting actions to clusters with matching tags, reducing lateral access risks. It also supports federated identities with SAML or OIDC session tags, while fine-grained permissions can be combined with TBAC for detailed access governance. This feature requires Neptune engine version 1.2.0.0 or later with IAM authentication enabled.
Source & further reading
Amazon Neptune now supports tag-based access control for IAM ↗Source published 2026-07-27. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.