{"id":"cfn-sso-abac-separate-resource","text":"IAM Identity Center ABAC configuration is managed through a dedicated CloudFormation resource (`AWS::SSO::InstanceAccessControlAttributeConfiguration`), not as a property of the `AWS::SSO::Instance` resource.","truth_value":"IN","source":"entries/2026/03/11/AWSCloudFormation-latest-UserGuide-AWS_SSOhtml.md","source_url":"","source_hash":"960076791d1179b8","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cfn-sso-abac-separate-resource","truth_value":"IN","reason":"premise"}]}}