AWS rolled out the role manager capability within IAM that, when enabled, automatically creates default roles or reuses existing ones matching permissions during service setup via the console. At launch, it supports six services including AWS Lambda and Amazon EventBridge, reducing manual IAM configuration effort.
Roles created by role manager are standard IAM roles fully controllable by users, identifiable within the console. Users can disable role manager to manually refine permissions using IAM Access Analyzer. The feature is available in all AWS Regions except GovCloud and China, streamlining IAM role administration.
Source & further reading
AWS IAM now provides role manager to set up IAM roles automatically ↗Source published 2026-08-12. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.