ST-2026-214 · Authentication & identity
AWS makes account access management optional for new IAM Identity Center organization instances
AWS changed initial IAM Identity Center organization-instance configuration on 5 August 2026 so administrators can configure application access without enabling AWS account access management, while existing instances remain unaffected.
Previous state
New organization instances used the prior initial configuration path in which account access management was not exposed as the newly documented optional setup choice.
Current state
Administrators creating a new IAM Identity Center organization instance can choose application-only access without enabling AWS account access management initially; account access can be enabled later through instance settings or the UpdateInstance API.
Affected users
Who needs to care
AWS organizations creating new IAM Identity Center organization instances, especially deployments that need application federation without immediate AWS account access management.
Required response
What to do
Choose the initial account-access setting deliberately, document whether application-only mode is intended, and enable account access later only when its service-linked role and account-management behavior are required.
Evidence boundary
What the source does not prove
AWS states that the option applies to new organization instances and does not affect existing instances. When account access management is disabled during initial configuration, IAM Identity Center does not create the associated service-linked role in member accounts; this does not disable application access or prevent later enablement.
Lifecycle history
Dated event sequence
- Optional account-access setup becomes available
AWS added application-only initial configuration for new IAM Identity Center organization instances.
Evidence ledger
First-party sources
- 01Amazon Web Services — AWS IAM Identity Center account access management is now optional for new organization instances
Official AWS What's New · 2026-08-05
Open official source ↗