Friday, September 22, 2023
HomeSoftware EngineeringThe way to Assume Position throughout Accounts in AWS

The way to Assume Position throughout Accounts in AWS


If you could assume function between AWS accounts, or permit an account to imagine a job and use sources in one other AWS account, then you could create a job and fix the next coverage.

The next two (2) steps creates a Belief Relationship between the accounts.

Step 1 – Within the Supply Account

{
  "Model": "2012-10-17",
  "Assertion": [{
    "Effect": "Allow",
    "Action": [
      "sts:AssumeRole"
    ],
    "Useful resource": [
      "arn:aws:iam::DESTINATION-ACCOUNT-ID:role/DESTINATION-ROLENAME"
    ]
  }]
}

Step 2 – Within the Vacation spot Account

{
  "Model": "2012-10-17",
  "Assertion": [{
    "Effect": "Allow",
    "Principal": {
      "AWS": "arn:aws:iam::SOURCE-ACCOUNT-ID:role/SOURCE-USERNAME"
    },
    "Action": "sts:AssumeRole"
  }]
}
RELATED ARTICLES

1 COMMENT

  1. I was excited to find this web site. I need to to thank you for ones time due to this wonderful read!! I definitely loved every little bit of it and I have you saved as a favorite to see new stuff on your site.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Most Popular

Recent Comments