AWS Guardrails Blast Radius Identity & Access Hardening Essential AWS Guardrails (SCP / RCP) to Reduce Blast Radius Practical AWS guardrails that shrink the blast radius, block privilege escalation, and enforce safer cloud operations using organization-wide SCP and RCP controls.