Set up central resilience checks across AWS accounts.
What it does
Configures central-account access to assess workloads across multiple AWS accounts.
When to use it
Use when workloads span multiple AWS accounts and a central account should assess them.
How to use it
Give it the central account ID, service name, and regions; it creates cross-account roles, registers the service, and verifies discovery.
What you provide
- the central AWS account ID
- the service name
- the AWS regions
Uses
Good to know
- sends a credential to a server: externalId
What you need · 2
Requires access to the central AWS account and the member accounts where the workflow creates IAM roles.
An optional shared secret is submitted in the member-role trust policy and service permission model to guard cross-account role assumption; it can be used alongside the organization-ID condition.
Access · 4
This skill
IAM
Creates cross-account IAM roles
Resilience Hub
Registers cross-account services