Interactive workshop on writing and deploying AWS Service Control Policies that scale. Build production-ready SCPs to block security tampering, enforce encryption, and govern AI usage - then roll them out across AWS Organizations without disrupting developer workflows.

AI agents in Amazon Bedrock can be abused via a “confused deputy” exploit to access restricted models or exfiltrate data. This live demo shows the attack, then implements SCPs and identity boundaries to block it.