Home / server / Questions / 883957
In Process
Ben Davis
Asked: 2017-11-18 08:05:50 +0800 CST

How can my client give me access to his AWS account?

  • 772

I'm a contract web developer, and my client doesn't know anything about managing AWS, but wants to control the billing for the account. So, he wants to give me full access to set up EC2, S3, SES,and RDS.

I told him to create an IAM role for me (IAM > Create Role > Another AWS Account), and I told him which permissions to grant, but from there I'm not sure how to switch to that role.

Is there something else he needs to do to give me access?

amazon-web-services

2 Answers

  1. Create a user in IAM and give you administrator permissions. This lets you do anything technical, but doesn't let you close the account or see billing information.

    You can find step by step instructions here.

    • 2

  2. You need to setup Cross Account Access. There are two types. The first is when both accounts are owned by the same organization. The second is when the accounts are not owned by the same organization.

    For same account and different account access, start with this tutorial. Then for the second case you will need to create the "External ID". I have provided two links for this. Start with the first link and complete with the second link.

    Tutorial: Delegate Access Across AWS Accounts Using IAM Roles

    How to Use an External ID When Granting Access to Your AWS Resources to a Third Party

    • 0