How to Switch Roles in the AWS Management Console | AWS IAM Tutorial

In AWS, an IAM role lets you temporarily assume whatever permissions are given to the role. But as an IAM user, how do you switch roles?

In this hands-on tutorial, I’ll walk you through some basic setup: creating a new admin role and then granting an IAM user the permission to assume that role. Then in the AWS Management Console, I’ll show you how to switch to that role and back again.

🌟🌟If you’re interested in getting AWS certifications, check out these full courses. They include lots of hands-on demos, quizzes and full practice exams. Use FRIENDS10 for a 10% discount!

00:00 – Overviewing the IAM user we’ll be working with
01:22 – Creating a new role for Admin
02:12 – Granting an IAM user permission to assume a role
03:23 – Switching roles from the AWS Management Console

[TinyTechnicalTutorials]

What else do you want to learn in AWS? Let me know below in the comments!

[yalvar]

Very good point showcasing that an IAM user has to have specific permissions just to assume a role. Not everybody explains this which is mandatory to being able to assume a role.

[shawhat]

Brushing up on my IAM knowledge and I appreciate the way you presented, easy and digestible to follow along! Thank you so much :D you are severely underrated

[hazelnisa]

Easily explained, no nonsense. Saved time.❤❤

[JoshPeak]

This is a perfect snippet I needed to visually explain to a colleague this concept. Thank you!

[srini]

Many thanks for the video, at last, I learned this concept.

[ronaldfarnig]

Could you provide any use cases where you should use switch role rather than just adding permission directly to the IAM user?

[shyamreddy]

method 1:
Not using roles.
And Controlling access by attaching policies to directly to user groups.

method 2:
Controlling access by creating roles(with relevant policies attached).
And these roles will be assumed by users.

Which is best in real time projects ?

[praveensequeira]

Can we achieve the SAME ie allow this user the admin permission, by specifying his user arn in the trust policy of the role and just allowing sts:AssumeRole action in IAM policy attached to the user? Would that be right? Thank you in advance for answering 😊 😊😊

[sarurajendran]

Hi I have done the same but if i click switch roles in IAM user Its refreshing nothing is happening

[repeter]

Is it okey to show AccountId and Account alias?
I'm just curious :)

[StanislavSmirnov-ko]

искал медь (copper), а нашеле золото (gold)