Restrict AWS Management Console access to expected networks with sign-in resource-based policies and RCPs

This AWS guidance describes how to implement AWS Sign-In resource-based policies and Resource Control Policies (RCPs) to restrict Management Console sign-ins to corporate IP ranges, VPCs, and designated principals; it provides prerequisites, CLI commands to create and enable policies, verification via CloudTrail, and notes on integrating with Console Private Access and data perimeter controls.