In September 2026, AWS launched AWS IAM account access manager (AAM) , which lets administrators assign IAM roles to workforce users and groups in AWS IAM Identity Center. AAM combines IAM Identity Center’s single federation point and user awareness with the flexibility of IAM roles. Today, as part of our partner launch enablement, we’re pleased to share that you can manage AAM as code with Pulumi.