cloud auth_error ai_generated true

AccessDenied: cross-account IAM role assumption failed

ID: cloud/cross-account-access-denied

Also available as: JSON · Markdown
82%Fix Rate
86%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —

Root Cause

Cross-account IAM role assumption failed.

generic

Workarounds

  1. 90% success Verify trust policy allows source account: Principal: {AWS: arn}
  2. 88% success Ensure source has sts:AssumeRole permission for target role ARN

Dead Ends

Common approaches that don't work:

  1. Use shared credentials instead of role assumption 82% fail

    Security risk, hard to audit

  2. Make resource public 90% fail

    Security vulnerability