An IAM access analyzer finding is resolved and a cross-account role still grants access

A cross-account role remains reachable from a retired account even after the primary stack set shows the fix applied.