AWS Identity Furnace melts down your existing IAM roles, SCPs, permission boundaries, and inline policies into a single molten pool of intent, then reforges them into up to six equivalent configurations so you can choose which one to regret. Operating at 1,400 degrees of computational certainty, it produces clean, hardened credentials with no slag — though slag storage is available as a separate service at standard S3 rates. Currently available in us-east-1, with additional regions planned for a future date that will not be announced in advance.