From the course: AWS Essential Training for Administrators

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Cross-account access with IAM roles

Cross-account access with IAM roles

- [Instructor] For the second example, we'll take the scenario where a developer in a development AWS account needs temporary access to a resource like a Lambda function in a separate production AWS account. The process involves two steps. Configuring an IAM role in the destination account where access is needed. In this case, it is the production account, and then allowing a user in the source account, that is the development account, to assume that role. To test this, you will need two accounts, one for development and another for production. I'm logged into this account, which I plan to use as the production account. I've marked this account with red color. This is a new feature in AWS that allows you to associate a color with your account. You can set this by clicking your account ID and then going to account settings. Back to our demo. Let's create an IAM role that can be assumed by the developer. This time the…

Contents