Service Control Policies
Named by 2 kept items in this workspace.
1 items name it under classification.key entities and 1 under techniques.
Search every workspace for Service Control Policies. It matches the name as written, so it can find other things that share it.
The items that name it 2
Applied at Org level to restrict sandbox account actions; includes BudgetsSpendLimitDenyNewWorkloads, ManagedAccountSecurityControlPolicy, AdvancedModeRegionRestrictionSecurityControlPolicy, and FreeTierSCP (allowlist via Deny+NotAction)
All techniques in this workspace.