aws-allowlister is an automation tool that generates AWS Service Control Policies (SCPs) based on compliance framework requirements. The tool addresses the challenge of manually creating and maintaining AllowList SCPs by automatically compiling policies that restrict AWS service access to only those services that comply with specified compliance frameworks. The tool operates by analyzing compliance requirements and generating corresponding SCP policies that can be applied at the AWS Account level. This ensures that local administrators cannot perform actions using non-compliant AWS services within child accounts. Prior to this tool, creating AWS AllowList SCPs required manual processes involving spreadsheet creation and ongoing maintenance, which was prone to errors and inconsistencies. aws-allowlister streamlines this workflow by providing automated policy generation based on compliance framework specifications. The generated SCPs serve as guardrails within AWS Organizations, controlling which AWS Service APIs are accessible while maintaining compliance with organizational security and regulatory requirements.