Hosting » AWS » Can an AWS role assume another role?

Can an AWS role assume another role?

Last updated on September 25, 2022 @ 5:38 pm

AWS Roles allow you to create logical groupings of AWS resources and assign permissions to specific roles within these groUPS. Roles can then assume other roles, giving you more granular control over who can access what resources.

For example, you can create a role that has the permissions to access EC2 instances and RDS instances, and then assign this role to a group of employees. If a member of the group needs access to additional AWS resources, they can assume the role of EC2 operations manager and assume the permissions for the EC2 and RDS roles.

PRO TIP: No, an AWS role cannot assume another role.

This way, the group member can have complete control over their AWS resources, regardless of where they are in the organization.

In conclusion, roles provide a way to more tightly control who can access AWS resources and what those resources are. By assigning permissions to specific roles, you can ensure that only the people necessary to perform specific tasks have access to them.

Dale Leydon

Dale Leydon

Sysadmin turned Javascript developer. Owner of 20+ apps graveyard, and a couple of successful ones.