{"id":"sts-source-identity-immutable-once-set","text":"Source identity (`sts:SourceIdentity`) is immutable once set during an STS call — it cannot be changed during role chaining, and attempts to change it are denied.","truth_value":"IN","source":"entries/2026/03/11/IAM-latest-UserGuide-cloudtrail-integrationhtml.md","source_url":"","source_hash":"cb7bc3bfff11f21a","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"sts-source-identity-immutable-once-set","truth_value":"IN","reason":"premise"}]}}