Page Comparison

...

2. Create a user and attach the policy to the user. 

3. Create a Role (AssumeRole).

   1. Select AWS Account: This account

   2. Permissions

      1. Attach the policy as specified in the section Permissions required in AWS R53.

      2. Attach AWSOrganizationsReadOnlyAccess to discover accounts.

      3. Attach policy created in the following section.

   3. Tags: This is optional. Provide some meaningful tags.

   4. Role Name: Specify a name for the role.

   5. Click Create Role.

...

Fore creating a role with proper permissions, complete the following steps :for IAM Create Role  (AssumeRole):

1. In Select type of trusted entity, configure the following:

   1. Select AWS Account:Select Another AWS account.

   2. Provide the Account ID of the Trusted/Management account.

2. Permissions: Configure the following permissions:

   1. Attach Policy: Attach the policy that has permissions required for R53 sync (R53ReadWrite access)as specified in the section Permissions required in AWS R53.

3. Tags: This is optional. Provide some meaningful tags.

4. Role Name: Specify the IAM role that you just created.

5. Click Create Role.