AWS IAM Identity Center makes managment of AWS account access optional for new organization instances

AWS IAM Identity Center now lets you decide whether to enable management of AWS account access when creating a new organization instance.

• Manage access to AWS applications only without managing AWS account access
• Reduces access surface by not provisioning service-linked roles into member accounts
• Account management can be enabled later through instance settings or UpdateInstance API
• Available at initial configuration time for new IAM Identity Center instances
• Does not affect existing IAM Identity Center instances
• Available in all AWS Regions where IAM Identity Center is available

This optional account management feature provides greater flexibility and security for organizations using IAM Identity Center for application access management.