AWS organization makes it easier for you to control access to the AWS Resources

AWS Identity and Access Management (IAM) will now make it easier for users to have the access and control over their AWS resources, simply by utilizing their AWS organization of the IAM principals. Users can now use a new condition key, aws:PrincipalOrgID, stated in the permission policy which requires all the IAM principals to access your resources from the account within the organization. Let us take the example of an Amazon S3 bucket policy which would be needed by you for restricting any access to the principals related to any AWS accounts in the organization. With the aws:PrincipalOrgID condition, you can set a particular value to your organization ID as a condition in your policy.