Skip to content

Latest commit

 

History

History
19 lines (17 loc) · 581 Bytes

trust-relathionship-admin-role.md

File metadata and controls

19 lines (17 loc) · 581 Bytes

Create a Trust Relationship and attach it to the Dev role to allow the ADMIN role to assume it.

  1. Choose a name for the policy i.e "assume-target-account-role-policy".

     {
         "Version": "2012-10-17",
         "Statement": [
             {
                 "Effect": "Allow",
                 "Principal": {
                     "AWS": "arn:aws:iam::${ADMIN_ACCOUNT_ID}:role/${ROLE_NAME}"
                 },
                 "Action": "sts:AssumeRole",
                 "Condition": {}
             }
         ]
     }