Page Comparison

...

2. Create a user and attach the policy to the user. 

3. Create a Role (AssumeRole).

   1. Select AWS Account: This account

   2. Permissions

      1. Attach the policy as specified in the section Permissions required in AWS R53.

      2. Attach AWSOrganizationsReadOnlyAccess to discover accounts.

      3. Attach policy created in the following section.

   3. Tags: This is optional. Provide some meaningful tags.

   4. Provide the Role Name: Specify a name for the role.

   5. Click Create Role.

2. In Trusting/Child account.

   1. IAM Create Role  (AssumeRole)

      1. In Select type of trusted entity, configure the following:

         1. Select AWS Account:Select Another AWS account.

         2. Provide the Account ID of the Trusted/Management account.

      2. Permissions: Configure the following permissions:

         1. Attach Policy: Attach the policy that has permissions required for R53 sync (R53ReadWrite access).

      3. Tags (Optional, provide : This is optional. Provide some meaningful tag)tags.

      4. Provide Role Name: Specify the same name as provided in step 3.d.

      5. Click Create Role.