OCPBUGS#3629: Add a note regarding enabling SCP in AWS account

Author: xenolinux

modules/installation-configuration-parameters.adoc

@@ -677,7 +677,11 @@ ifdef::gcp[If you are installing on GCP into a shared virtual private cloud (VPC
 ====
 Not all CCO modes are supported for all cloud providers. For more information about CCO modes, see the _Cloud Credential Operator_ entry in the _Cluster Operators reference_ content.
 ====
-|`Mint`, `Passthrough`, `Manual`, or an empty string (`""`).
+[NOTE]
+====
+If your AWS account has service control policies (SCP) enabled, you must configure the `credentialsMode` parameter to `Mint`, `Passthrough` or `Manual`.
+====
+|`Mint`, `Passthrough`, `Manual` or an empty string (`""`).
 ifndef::openshift-origin[]
 |`fips`
 |Enable or disable FIPS mode. The default is `false` (disabled). If FIPS mode is enabled, the {op-system-first} machines that {product-title} runs on bypass the default Kubernetes cryptography suite and use the cryptography modules that are provided with {op-system} instead.