I’ve been working on a tool for managing AWS Organizations, SCPs, and IAM policies. At the moment it’s more a collection of scratch-my-own-itch features (interactive tree view for accounts, access denied debugger, and a few tools related to seeing how SCPs are inherited through the OU structure). Hosting it at wut.dev if this sounds interesting to you.

One neat thing (although makes it more challenging to build) is that I’m using the AWS JS SDK to do everything client side. So the whole app is basically a single HTML/JS page with no API, creds are only stored locally, etc.