AWS, Security, Architecture, Authentication, Authorization.
We can start by defining the role’s trust policy — in this policy, the resource, is the role itself. We let specific roles (principals) from services A and B assume this role (action). We can give a broader scope for services A or B, either to the entire account or to a role with a predefined