Explain the difference between a service role, a cross-account role, and a federated role, with examples for each.

Question

Lingesh Kumar K · Accepted Answer

Service role: Assigned to an AWS service to perform actions on your behalf (e.g., an EC2 role allowing the instance to access S3). Cross-account role: Allows entities in one AWS account to access resources in another (e.g., an IAM role in Account B assumed by an EC2 instance in Account A). Federated role: Grants temporary access to users authenticated outside AWS (e.g., corporate AD users accessing AWS via SSO).

Explain the difference between a service role, a cross-account role, and a federated role, with examples for each.

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community available in

Ekasquest - Cloud Computing, DevOps & Tech Q&A Community available in