Service control policies (SCPs) offer central control over the maximum available permissions for IAM users and IAM roles in an organization.