This article explains service-linked roles (SLRs) in AWS, detailing their unique characteristics and how they differ from standard service roles. It covers how SLRs are created, managed, and the implications of AWS owning these roles, including access limitations for users.

dAWShund is a suite of tools designed to enumerate, evaluate, and visualize AWS IAM policies to ensure comprehensive access management and mitigate misconfigurations. It consolidates Identity-Based Policies and Resource-Based Policies, simulates effective permissions, and provides visual representations of access levels within AWS environments using Neo4j. Contributions to enhance the tool are encouraged, and it operates under the BSD3 License.

AWS Resource Control Policies (RCPs) enhance security by allowing organizations to build data perimeters and manage resource-based policies, complementing existing Service Control Policies (SCPs). This article discusses the benefits, challenges, and use cases of RCPs and SCPs, along with examples of policy syntax and guidance for migrating from SCPs to RCPs effectively.