HOW AWS IAM ROLE MANAGER RETHINKS THE STARTING POINT FOR IAM ROLES

Summary from the TLDR InfoSec newsletter

The newly released AWS IAM Role Manager is designed to enable users who are new to AWS to quickly deploy services without needing to manually create IAM roles for services. With role manager enabled, when users create new workloads, an IAM role with the requisite permissions is automatically created and attached. Roles may be over-provisioned, so users are encouraged to limit capabilities afterward.