AWS and GCP IAM Role Models

In AWS, a role is an assumable identity with attached permissions. In GCP, a role is a permission bundle; principals receive roles through IAM bindings, and workloads execute as service accounts.

When translating controls between the two clouds, map the trust path separately from the permission set. Similar names do not imply equivalent identity boundaries.