Ireland and the United Kingdom enterprise technology-change research

PT-2026-206 · dossier edition · 5 August 2026

PlatformTrace

Enterprise platform change across Ireland and the United Kingdom.

cloud identity architecture decision · accepted decision

GOV.UK accepts a move from long-lived IAM users to roles and pod identities

GOV.UK accepted an architecture decision to retire IAM users and long-lived access keys as candidate services are identified and can move to roles or pod identities.

Organisation
Government Digital Service, United Kingdom
Predecessor
service access using IAM users and long-lived access keys
Destination
IAM roles and Kubernetes pod identities where candidate services can adopt them
Workload
AWS IAM roles and Kubernetes pod identities
Stage
accepted decision
Evidence boundary: Accepted decision status is preserved. The source does not establish completed estate-wide retirement or an unconditional migration of every service.

Verified platform change

GOV.UK accepted an architecture decision to retire IAM users and long-lived access keys as candidate services are identified and can move to roles or pod identities.

Transition

From: service access using IAM users and long-lived access keys

To: IAM roles and Kubernetes pod identities where candidate services can adopt them

Known unknowns

Accepted decision status is preserved. The source does not establish completed estate-wide retirement or an unconditional migration of every service.

Official sources

  1. Use IAM roles for services — 2026-06-20

Updates

Source rechecked on 5 September 2026. The first-party GOV.UK evidence has not materially changed; Accepted decision status and conditional migration remain supported without an estate-wide completion claim.