Status: IN
Source identity (`sts:SourceIdentity`) is immutable once set during an STS call — it cannot be changed during role chaining, and attempts to change it are denied.
Source: entries/2026/03/11/IAM-latest-UserGuide-cloudtrail-integrationhtml.md