[philwelch]

This is true. It does add additional complexity, especially if you have to do cross-account access, but the tooling for that is improving over time.