Delegate access across AWS accounts using IAM roles (Part 1)
During this lab i tried to implement a senario where you are as an adminastrator of your organization and you have two aws accounts as it is in our lab or more, and you like to share the resources of one of your account (example : production account with) with another account (example: developement account). so to solve this issue you have to use the access cross account role. where as an administrator in the production account you will give access, in another word assume a role to the dev acc, where this one will assume that role to the users and the group within its account that it wants them to access to that s3 bucket in prod account. I have showed you how you can achieve that either throughout the console management or using the aws cli