- Adds Account Access Manager, letting admins assign IAM roles to workforce users and groups from IAM Identity Center.
- Provides a single federation point with flexible IAM role permissions via console, SDK, and IaC (CloudFormation/CDK).
- Available at no extra cost in all AWS commercial regions, with updated documentation in the IAM User Guide.