Status: OUT
IAM PassRole governance can be enforced through specific role ARN allow-lists and cross-account explicit deny policies, making role delegation auditable and controllable.
JSON