A Vault must be unsealed before it can access its data. Likewise, it can be sealed to lock it down.| Seal/Unseal | Vault | HashiCorp Developer
Service control policies (SCPs) offer central control over the maximum available permissions for IAM users and IAM roles in an organization.| docs.aws.amazon.com