Status: IN
Self-managed CloudFormation StackSets require two IAM roles: `AWSCloudFormationStackSetAdministrationRole` in the admin account and `AWSCloudFormationStackSetExecutionRole` in each target account, with a trust relationship between them.
Source: entries/2026/03/11/AWSCloudFormation-latest-UserGuide-stacksets-troubleshootinghtml.md