Creating a cross-account access role

Execute the following steps to create a cross-account access role:

1. From the trusting account (in our example, this is account A), open IAM from the AWS Management Console.
2. Select Roles from the menu, and then select Create Role.
3. Select Another AWS account as the trusted identity.
4. You must then enter the trusted AWS account ID; in this case, this is the ID for account B:

5. Click on Next: Permissions.
6. We can now add the permissions we want the role to have. I have selected AmazonRDSFullAccess, as shown:

7. Once the permissions have been selected, select Next: Tags.
8. For this demonstration, we don’t need to add any tags, so click on Next: Review.
9. Add a role name—we will call it CrossAccountRDS—and then click Create role:

10. Select the CrossAccountRDS role in the list of roles that displays additional information about the role. From here, select the Trust relationships tab:

11. You can see that the account that we listed is under...