How to create IAM roles with AIS permission boundary for system accounts?
Can a system account assume multiple such IAM roles in 1 AWS Account? A:) System account to be granted SCP custom_role and in the assume role trust-relationship add the system account Masscot ID to achieve. If an IAM role is created in account 1 but shared with account 2. A trusted principal. Can such a role be assumed by a bot in account 2? A:)Yes can be achieived through granting role switch from account 1 to account 2. https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_permissions-to-switch.html https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-console.html
