Configure Switch role

Overview

In this step, you will configure the lab44-RoleFullAccess role to allow No-permission-user user to use this role.

Switch role configuration

  1. Access the IAM console at the link https://console.aws.amazon.com/iam/home#/home
  2. In the left navigation pane, select Users
  3. Click on the user No-permission-user, copy the User ARN information

4.2_UserARN

  1. In the left navigation bar, click Roles, then select the newly created IAM Role lab44-RoleFullAccess.

  2. Select the Trust relationships tab and select Edit trust relationship

4.2_EditTrust

  1. Add AWS with the User ARN of the user No-permission-user as shown below. Then click Update Policy

4.2_UpdatePolicy

  1. Thus, the user No-permission-user can now use the lab44-RoleFullAccess role. To verify the assume role, do the following:
    • Log in with the user No-permission-user, then click on the user’s name in the top right corner of the screen, and select Switch Role 4.2_SwitchRole
    • On the Switch Role page, enter the required information. 4.2_SwitchRole
    • Click Switch role to assume the role for the user No-permission-user.
    • Access basic services like EC2 or RDS to confirm the Switch role configuration is successful. With AdministratorAccess permissions, the user No-permission-user can now use any service.