Stax New Managed IAM Roles

Stax uses IAM role assumption to access and manage accounts within Stax-managed AWS Organizations. To improve security and consistency, the existing roles used by Stax Assurance and its associated components will be replaced with new roles with fine-grained permissions.

There new roles will be prefixed with the IAM Path /stax/automation/ and have been added to the list of Stax Management Roles.

As a precaution both the existing and new roles will co-exist for a transition period, after which the existing roles will be removed from AWS Accounts. There is no expected interruption to service as a result of these changes.

This change will occur commencing 2025-08-05 and is expected to be completed by the end of the week on 2025-08-15.