Redshift Serverless access in SCP

Question

Hi AWS, if I add `redshift-serverless:*` in the SCP does it change anything i.e.

1. Any public endpoint
2. Lack of support for vpc endpoints
3. Communication flow between AWS Managed service components vs Customer Managed

Anjali Sharma · Answer

```
{
    "Statement": {
        "Effect": "Allow",
        "Action": "redshift-serverless:*",
        "Resource": "*"
    }
}
```

Despite utilizing the Allow value keyword identical to an IAM permission policy, in an SCP, it doesn't provide actual user authorization. SCPs operate as filters, defining the utmost permissions for accounts within an organization, organizational unit (OU), or individual account, rather than granting specific user permissions.

**Reference Document:**

* [https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_scps_syntax.html]()

Redshift Serverless access in SCP

Add your answer

Relevant content