In a rapidly growing cloud environment, ensuring that your resources align with organizational policies and security standards is crucial. One such measure is restricting IAM group users from launching EC2 instances with unapproved AMIs (Amazon Machine Images). By implementing Service Control Policies (SCPs) in AWS Organizations, you can enforce such restrictions effectively.
https://businesscompassllc.com/enabling-scp-policies-to-prevent-iam-group-users-from-launching-ec2-instances-with-unapproved-amis/