aws:userid aws:SourceIdentity aws:PrincipalArn
https://aws.amazon.com/blogs/security/how-to-revoke-federated-users-active-aws-sessions/
How to revoke federated users’ active AWS sessions
SCP
Advertising: