General: Enterprise Management preview: one policy for every Kiro client: Write one policy in the AWS console and Kiro applies it in the IDE, the CLI, Kiro Web, and Kiro Crew LTS. In preview for new Kiro profiles created in US East (N. Virginia).

Kiro Enterprise Management is in preview. It is available to newly created Kiro profiles in US East (N. Virginia) (us-east-1): create a profile there and the Controls page is already in your console, with no setup step. Support for existing profiles and for profiles in Europe comes later. Administrators write one policy in the AWS console, and every developer on the profile gets it in the Kiro IDE, Kiro CLI, Kiro Web, and Kiro Crew LTS. Kiro IDE users need version 1.4.154 or later; Kiro CLI users need version 3.1.0 or later. A policy has three parts: rules that allow, deny, or ask before Kiro uses a model, runs a shell command, reads or writes a file, searches the web, or calls an MCP tool; settings such as the default model, prompt logging, and usage reports; and the steering files, Skills, and Powers you choose to distribute to developers. A rule can apply to everyone on the profile, to one group, or to one user. It works with IAM Identity Center, Okta, or Microsoft Entra ID as the identity source.