AWS organizations documentation change
Summary
Increased SCP document size limit to 10,240 chars; added Service Catalog limit; increased max SCP attachments from 5 to 10
Security assessment
These are service quota increases without security context. No evidence of vulnerability remediation. SCP changes are operational improvements.
Diff
diff --git a/organizations/latest/userguide/orgs_reference_limits.md b/organizations/latest/userguide/orgs_reference_limits.md index 1426664dd..58180ef4c 100644 --- a//organizations/latest/userguide/orgs_reference_limits.md +++ b//organizations/latest/userguide/orgs_reference_limits.md @@ -52 +52 @@ Number of policies of each type in an organization | Service control policies: -Maximum size of a policy document | Service control policies: 5120 characters Resource control policies: 5120 characters Declarative policies: 10,000 characters Backup policies: 10,000 characters Chat applications policies: 10,000 characters AI services opt-out policies: 2500 characters Tag policies: 10,000 characters Security Hub policies: 10,000 characters **Note:** If you save the policy by using the AWS Management Console, extra white space (such as spaces and line breaks) between JSON elements and outside of quotation marks, is removed and not counted. If you save the policy using an SDK operation or the AWS CLI, then the policy is saved exactly as you provided and no automatic removal of characters occurs. +Maximum size of a policy document | Service control policies: 10,240 characters Resource control policies: 5120 characters Declarative policies: 10,000 characters Backup policies: 10,000 characters Chat applications policies: 10,000 characters AI services opt-out policies: 2500 characters Tag policies: 10,000 characters Security Hub policies: 10,000 characters **Note:** If you save the policy by using the AWS Management Console, extra white space (such as spaces and line breaks) between JSON elements and outside of quotation marks, is removed and not counted. If you save the policy using an SDK operation or the AWS CLI, then the policy is saved exactly as you provided and no automatic removal of characters occurs. @@ -86,0 +87 @@ Amazon DevOps Guru | 10000 | Yes | [Amazon DevOps Guru Quotas](https://docs.aws. +AWS Service Catalog | 15000 | No | @@ -108 +109 @@ Policy type | Minimum attached to an entity | Maximum attached to root | Maximum -Service control policy | 1 — Every entity must have _at least_ one SCP attached at all times when you enable SCPs. You can't remove the last SCP from an entity. | 5 | 5 | 5 +Service control policy | 1 — Every entity must have _at least_ one SCP attached at all times when you enable SCPs. You can't remove the last SCP from an entity. | 10 | 10 | 10