AWS updated IAM Identity Center to allow customers creating new organization instances to opt out of managing AWS account access, focusing solely on AWS application access management. This avoids service-linked role provisioning in member accounts unless account management is enabled later, reducing the access surface and potential security exposure in multi-account environments.
The change affects only new instances during initial configuration and does not modify existing setups. AWS highlights benefits in simplifying identity management with single sign-on and consistent authentication experiences. The feature is available across all AWS Regions where IAM Identity Center operates, based on AWS announcements without external validation.
Source & further reading
AWS IAM Identity Center makes management of AWS account access optional for new organization instances ↗Source published 2026-08-05. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.