{"id":15703,"date":"2025-09-12T12:08:54","date_gmt":"2025-09-12T06:38:54","guid":{"rendered":"https:\/\/www.skynats.com\/?p=15703"},"modified":"2025-09-15T11:17:14","modified_gmt":"2025-09-15T05:47:14","slug":"how-do-i-assume-an-iam-role-using-the-aws-cli","status":"publish","type":"post","link":"https:\/\/www.skynats.com\/blog\/how-do-i-assume-an-iam-role-using-the-aws-cli\/","title":{"rendered":"How do I assume an IAM role using the AWS CLI"},"content":{"rendered":"\n

Introduction<\/strong><\/h2>\n\n\n\n

Cross-account access is a common need in AWS environments\u2014especially when managing resources across multiple accounts. This guide walks you through securely assuming an IAM role in a destination AWS account using the IAM AWS CLI from a source account via temporary credentials.<\/p>\n\n\n\n

Prerequisites<\/strong><\/h2>\n\n\n\n
    \n
  1. You have an IAM user in the source account with permissions to assume a role in the destination account.<\/li>\n\n\n\n
  2. The destination account has a trust policy allowing the source IAM user or role to assume the role (e.g: S3MigrationRole).<\/li>\n\n\n\n
  3. The AWS<\/mark><\/a> <\/strong>CLI is installed.<\/li>\n<\/ol>\n\n\n\n

    Step 1: Install the AWS CLI<\/strong><\/h2>\n\n\n\n

    If you haven’t already, install the AWS CLI<\/p>\n\n\n\n

    Verify installation:<\/p>\n\n\n\n

    aws --version<\/code><\/pre>\n\n\n\n
    Step 2: Configure the AWS CLI with IAM User Credentials<\/strong><\/h2>\n\n\n\n
    Use the IAM user credentials from the source account<\/strong>:<\/p>\n\n\n\n
    aws configure<\/code><\/pre>\n\n\n\n
    You\u2019ll be prompted for four inputs:<\/p>\n\n\n\n
    AWS Access Key ID [None]: AKIA**********MPLE\nAWS Secret Access Key [None]: wJalrXUtnFEMI\/K7MDENG\/bPxRfiCY*********KEY\nDefault region name [None]: us-west-2\nDefault output format [None]: json<\/code><\/pre>\n\n\n\n