Terraform AWS provider: assume role property

https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

Terraform provider AWS

provider "aws" {
  region     = var.region
  version    = ">= 0.13"
  assume_role {
    role_arn = "arn:aws:iam::01234567890:role/role_in_account_b"
  }
} 

 provider "aws" {
  region = "eu-central-1"
  assume_role {
    role_arn = format("arn:aws:iam::0987654321:role/your-role-%s", var.youraction)
  }
}

Related

• ExternalId
• AWS policies

Activities

• Read: https://support.hashicorp.com/hc/en-us/articles/360041289933-Using-AWS-AssumeRole-with-the-AWS-Terraform-Provider
• Read: https://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRole.html

See also

• AWS STS (sts:), aws sts [ get-session-token | get-caller-identity | assume-role | assume-role-with-web-identity | assume-role-with-saml | get-access-key-info ]
• STS, AWS Security Token Service (STS), aws sts, Terraform AWS provider: assume_role
• Terraform AWS: provider, resources, modules, data sources, VPC, IAM, Net, EC2, S3, Route53, ACM, CloudWatch, SES, RDS, ECS, awscc, autoscaling, EKS