Configuring Managed OTF Access | Teradata MOTF - Configuring Managed OTF Access - Teradata Vantage

Follow these steps for granting cross-account access using an IAM role:

1. An administrator (or authorized identity) in the account that owns the external bucket (Account A) creates an IAM role.
2. The administrator in Account A attaches a permissions policy to the role, granting cross-account access to the required resource.
3. A trust policy is added to the role, specifying an IAM identity in the Teradata cluster account (Account B) as the trusted principal allowed to assume the role.
4. A DBA in Account B delegates permissions to the EC2 instance using an authorization object. This enables the EC2 instance to assume the IAM role created in Account A, thereby gaining access to the external resource.