Menu
Cross-Account Manager
Cross-Account Manager

Step 5. Use the Solution Webpage to Access a Sub-Account

After an Administrator creates the necessary role mappings, your directory users and groups can access the master account and approved sub-accounts. Use the following steps to log in to the master account and access role-specific, managed sub-accounts.

  1. Open the access URL (e.g., https://example-corp.awsapps.com/console/) that your Administrator provided and enter your corporate credentials.

  2. The login screen contains a drop-down field of all roles assigned to your user identity. Select the role you want to use to log in to solution. This role will determine the sub-accounts you can access.

    
                        Console login screen
  3. This takes you to the AWS Management Console. Open the Amazon S3 console.

  4. Select the Amazon S3 bucket that hosts the webpage of access links. (Your Administrator will provide the bucket name, which is the AccessLinksBucket output from Step 1.)

  5. Choose the webpage (cross-account-manager-links.html) to go to the detail page, and choose Open. This will open a webpage that contains access links for all managed accounts.

    
                        Example access links webpage
  6. The webpage links are organized by role. Find the role you used to log in to the console, and choose a link under that role to access an approved sub-account.

    A window appears with relevant fields already populated.

    
                            Role prompt

    Note

    The solution webpage will show all sub-accounts that the solution manages, not just the accounts your role(s) has access to. If you try to access a sub-account that is not authorized for your role, the switch role window will show an authorization error.

  7. Choose Switch Role to open the AWS Management Console for that sub-account. The account will switch automatically.

The last several roles that you used appear on the Identity menu of the AWS Management Console. The next time you need to switch to one of those roles, you can simply choose the desired role. For more information, see the IAM User Guide.