February 2020
Intermediate to advanced
440 pages
13h 51m
English
For switching role, the non-admin user should be given the AssumeRole permission for the role on the master account. Let's take a look:
{ "Version": "2012-10-17", "Statement": [ { "Sid": "AssumeRoleForChildAccount", "Effect": "Allow", "Action": "sts:AssumeRole", "Resource": "arn:aws:iam::380701114427:role/OrganizationAccountAccessRole" } ]}
Save this policy as AssumeRolePolicyChild1.
Read now
Unlock full access