AWS Sign-in now supports resource-based policies and resource control policies

These policies restrict console sign-in to expected networks and are evaluated during sign-in and whenever the console session requests new credentials.