Your organization manages multiple AWS accounts with AWS Organizations and currently creates IAM roles manually. You want an automated, scalable way to create and manage IAM roles across the accounts. What is the MOST operationally efficient solution?

AWS CloudFormation StackSets allow you to deploy and manage CloudFormation stacks across multiple AWS accounts and Regions from a single CloudFormation template. This is the most operationally efficient solution because it automates the creation and management of IAM roles across all accounts within your AWS Organizations structure from a central point, ensuring consistency and reducing manual effort. Creating reusable CloudFormation templates and running them in each account manually is less efficient as it still requires individual execution per account. Integrating AWS Directory Service with AWS Organizations is for identity management and user authentication, not for provisioning IAM roles themselves. AWS Resource Access Manager (RAM) is used for sharing resources like subnets or transit gateways, not for deploying and managing IAM roles.