All the control plane. Data plane is distributed and roles using iam to access resources can still do so during a control plane outage.