Comment on page

IAM Role Security

The role’s trust relationship specifies that Antimetal (account ID: 042894766506) is the only AWS account that can assume this role.
As a further security measure, the role requires an ExternalID that is unique to each client. Here is an example of what the role trust relationship looks like:
1
{
2
    "Version": "2012-10-17",
3
    "Statement": [ {
4
      "Effect": "Allow",
5
      "Principal": {
6
        "AWS": "arn:aws:iam::042894766506:root"
7
      }
8
      ,
9
      "Action": "sts:AssumeRole",
10
      "Condition": {
11
        "StringEquals": {
12
          "sts:ExternalId": "XXXXXXXXXXXXX"
13
        }
14
      }
15
    }
16
    ]
17
  }

AWS Permissions

Cross-Account IAM Roles, Explained

Last modified 6mo ago