5 AWS AI Controls Every Security Team Should Have 

This article reviews AWS organization-level controls for AI governance—covering MCP server access restrictions, Bedrock Policies for baseline guardrails, denying model or service availability via SCPs, and controls to prevent long-term Bedrock API key misuse—and provides implementation guidance and sample SCP/policy strategies; it notes a Sonrai-identified SCP bypass involving long-term keys but is primarily a how-to and advisory piece.