You want to restrict cross-account to specific IP adressess.Where should this condition be applied?

Which AWS service issues temporary credentials for cross-account access?

A user wants to access resources across accounts without switching role manually?

An IAM role allows cross-account access but users get AccessDenied?

Can cross-account access be granted without IAM roles?