Page Comparison

An IAM user is an entity that represents a person or application that interacts with AWS. It has specific credentials and permissions attached to it, like roles, to control access.

Configuring Assume Role Policy

...

2. Create a user and attach the policy to the user. 

3. Create a Role (AssumeRole).

   1. Select AWS Account: This account

   2. Permissions

      1. Attach the policy as specified in the section Permissions required in AWS R53.

      2. Attach AWSOrganizationsReadOnlyAccess AWSOrganizationsReadOnlyAccess to discover accounts.Attach policy created in the following section.

   3. Tags: This is optional. Provide some meaningful tags.

   4. Role Name: Specify a name for the role.

   5. Click Create Role.

...

Fore creating a role with proper permissions, complete the following steps :for IAM Create Role  (AssumeRole):

1. In Select type of trusted entity, configure the following:

   1. Select AWS Account:Select Another AWS account.

   2. Provide the Account ID of the Trusted/Management account.

2. Permissions: Configure the following permissions:

   1. Attach Policy: Attach the policy that has permissions required for R53 sync (R53ReadWrite access)as specified in the section Permissions required in AWS R53.

3. Tags: This is optional. Provide some meaningful tags.

4. Role Name: Specify the same name as provided in step 3.dthe IAM role that you just created.

5. Click Create Role.