Tobias Schmidt @tpschmidt.com · Jun 6 TIL: AWS has native multi-party approval built into Organizations! Enforcing a 4-eyes principle on critical operations Used to mean cobbling together SCPs, Lambda functions, and Slack bots. Now it's a config in the Organizations console.
0 likes 1 replies
?
Replies
You define an approval team in IAM Identity Center, set an approval threshold (e.g. 2 of 5), and attach it to a protected operation. That operation won't run until enough approvers respond. Everyone on the team gets an email linking to the approval portal 😮 Good fits: