OrganizationAccountAccessRole predefined IAM role

Predefined IAM role used by default if not modified during account creation to access AWS accounts from the management account.

AWS roles:

  aws iam list-roles | grep RoleName
           "RoleName": "AWSServiceRoleForOrganizations",
           "RoleName": "AWSServiceRoleForSupport",
           "RoleName": "AWSServiceRoleForAccessAnalyzer",
           "RoleName": "OrganizationAccountAccessRole",
           "RoleName": "AWSServiceRoleForAmazonEKS",
           "RoleName": "AWSServiceRoleForAmazonEKSNodegroup",
           "RoleName": "AWSServiceRoleForAutoScaling",
           "RoleName": "AWSServiceRoleForRDS",
           "RoleName": "AWSServiceRoleForTrustedAdvisor",
           "RoleName": "eksctl-YOUR_CLUSTER1-prod-cluster-ServiceRole-EZ64N75VT335",
           "RoleName": "eksctl-YOUR_CLUSTER1-prod-nodegroup-standar-NodeInstanceRole-KOHNE2ZI0adfaDE",

Related

• AWS Roles
• aws organizations create-account
• AWS accounts
• Terraform multiple providers

• aws_organizations_policy_attachment
• Accessing member accounts in an organization with AWS Organizations
• Risk Associated With The Role Created In New AWS Organizations Accounts
• Creating OrganizationAccountAccessRole for an invited account with AWS Organizations

See also

• OrganizationAccountAccessRole
• aws organizations create-account
• AWS Organizations: aws organizations ( describe-account | list-roots | list-accounts | list-delegated-administrators | create-account | describe-organizations | enable-all-features | enable-aws-service-access ), OrganizationAccountAccessRole