If you are using AWS Single Sign-On (SSO) and you plan to use a Permission Set in multiple AWS accounts and will be using Customer Managed Policies, it’s annoying that you actually have to create a Customer Manage IAM Policy in each of your target AWS Account, before you could use it.