Why Cloud Permission Approvals, Not Installs, Often Delay ROSA Projects

A ROSA install cannot begin until the customer accepts marketplace terms, which takes only minutes. The larger delay comes from the STS-based installer role, whose elevated trust policy must be reviewed by the customer's cloud security team. On the author's engagements that review took three to five days, with one customer needing nearly two weeks. The fix was a runbook change making identity and permissions approval a required pre-check before any install starts. The article also stresses separating authentication (who is making the request) from authorization (what that identity may do), a distinction that applies equally across AWS, Azure and GCP.