Skip to content

Cross Account Access

Many AWS customers use separate AWS accounts for thier development and production resources. This separation allows them to cleanly separate different types of resources and can also provide some security benefits.

Cross account access makes it easier for you to work productively within a multi-account (or multi-role) AWS environment by making it easy for you to switch roles within the AWS Management Console. You can now sign into the console using your IAM user name and then switch the console to manage another account without having to enter (or remember) another user name and password.

Steps

  1. Identify Account Numbers
  2. Create a group in IAM - DEV
  3. Create a user in IAM - DEV
  4. Log in to Production
  5. Create the "read-write-app-bucket" policy
  6. Create the "UpdateApp" Cross Account Role
  7. Apply the newly created policy to the role
  8. Log in to the Developer Account
  9. Create a new inline policy
  10. Apply it to the Developer group
  11. Login as John
  12. Switch Accounts