# SEC03-BP05: Define permission guardrails

## Description

Boundaries cho permissions.

## Implementation Guidance

- Service Control Policies
- Permission boundaries
- Deny policies for dangerous actions
- Region restrictions
- Resource-based restrictions

## Risk Level

Medium - Without guardrails, accidents happen.
