Writing

How SCPs really evaluate cross-account conditions A Kubernetes RBAC pattern that silently grants cluster-admin