AWS IAM Identity Center Makes Account Access Management Optional
AWS IAM Identity Center just got more flexible—you can now skip AWS account access management when setting up a new organization instance. This means you can use it purely for managing access to AWS applications without the overhead of account provisioning. The best part? It reduces your security surface by not deploying service-linked roles to member accounts. Need account management later? No problem—enable it anytime through instance settings or the UpdateInstance API. Available across all AWS Regions where IAM Identity Center operates.