Status: IN
Self-managed StackSet permissions require manually creating IAM roles for cross-account trust; service-managed permissions leverage AWS Organizations to create IAM roles automatically.
Source: entries/2026/03/11/AWSCloudFormation-latest-UserGuide-stacksets-conceptshtml.md