Python package to simplify cross-account access
On AWS, a multi-account architecture is often employed to establish a solid foundation for an environment. A common setup to provide user access to the environment is depicted in figure 1.
 |
|---|
| Figure 1 - Schmatic overview of IAM users and privileges in a multi-account environment |
IAM (user) accounts are created in one root account (the IAM account). Access to and specific privileges in the other root accounts (for example, the Application account) are provided by roles. An IAM user is assigned privileges to use the AssumeRole API operation to assume (or switch to) these roles.
The configuration of this module makes use of the standard AWS configuration files, with a few small additions. In addition, a module specific configuration file is required.
The basis for AWS access in
## Usage
## Limitations
This code is licensed under the MIT license. Please see LICENSE for full text.
- Fork it on GitHub (https://github.com/lvvloten/aws-role-session)
- Create your feature branch (
git checkout -b feature/my-new-feature) - Commit your changes (
git commit -am 'Add some feature') - Push to the branch (
git push origin feature/my-new-feature) - Create a new Pull Request (on GitHub)