Today, AWS CloudFormation StackSets provides customers with three new APIs to activate, deactivate, and describe AWS Organization trust access needed to get started with service-managed StackSets. You can use service-managed StackSets to centrally manage stack deployments to AWS accounts in one or more organizational units (OUs). With this launch, you can programmatically manage trust access for your management or delegated administrator accounts. Activating trust access provides the necessary permissions for your management or delegated administrator accounts to create and manage service-managed stack sets for your AWS Organizations. In addition to providing this trust access in AWS CloudFormation via AWS Management Console, you can now choose to manage trust access with these newly launched APIs.
Source:: Amazon AWS