A customer took over new account IDs, can he see all resources ok linked account IDs?

Question

An AWS customer (Company A) took over another AWS account (legally, of course). The take over has been completed, and Company A has now access to the Payer account ID and the linked account IDs from Company B. The Director of Company A asked:

"I am now the 'Management Account' owner for this AWS org we've take over. Under the Organisational Structure I see two other (linked) accounts. Do I have control over those accounts? Do I need to be able to 'switch context' in some sense to be able to see their resources, or will they show up in the console if I am in the right region, regardless of which account the resources are in?"

Accepted Answer

You will only ever be able to see the resources for the account you are logged into unless those resources have been shared between accounts using something like Resource Access Manager[1], in cases where resources are not shared across accounts you will need to login or switch roles into the account where the resources are located.

for more information on how to switch roles you can checkout the AWS documentation [2]

[1] https://aws.amazon.com/ram/
[2] https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-console.html

A customer took over new account IDs, can he see all resources ok linked account IDs?

相關內容