DEV Community

AWS cross account access (switch role)

In this tutorial we will switch role delegated to access a resources in different AWS accounts. You share resources in one account with users in a different account. By setting up cross-account access in this way, you don't have to create individual IAM users in each account.

  • Access AWS console
  • Open Identity and Access Management (IAM)
  • Click "Roles" on left side menu

Image description

  • Select the AWS account
  • Since it is a cross account access, give the the Account ID to which you want to grant access to your resources

Image description

  • Next is to give the permission policies, type the policy you want to attach in the search bar.

Image description

  • Add the Role name, and an option description. Then create the role

Image description

  • Finally role can be used in cross account by clicking on switch role in the console

Image description

  • Role can be switched by inputting the Account ID, Role name.

Image description

Top comments (0)