These service roles allow other AWS services to perform actions on our behalf. As you work within AWS and begin to utilize and configure various services, there will be requirements whereby the service will create service roles in order to perform specific steps and functions. For example, during the configuration of AWS Elastic Beanstalk, a service role will be created allowing Elastic Beanstalk to use other AWS services on your behalf. This role will have all of the required permissions to allow the service to carry out the necessary tasks that it needs to. It’s important to understand that service roles exist only in the account in which they were created and can’t be used for cross-account access.
These service roles are often created during the configuration of the service itself, but it’s also possible to create service roles within IAM. Let's see how to do it:
- From within the AWS Management Console, select IAM.
- Select Roles on the menu and...
