https://ocholuo.github.io//posts/SCPs-Policy-inheritance/
AWS - IdenAccessManage - SCPs policy inheritance - Grace