A Security Engineer signed in to the AWS Management Console as an IAM user and switched to the security role IAM role.To perform a maintenance operation, the Security Engineer needs to switch to the maintainer role IAM role, which lists the security role as a trusted entity.The Security Engineer attempts to switch to the maintainer role, but it fails.
What is the likely cause of the failure?
The security role and the maintainer role are not assigned to the IAM user that the Security Engineer used to sign in to the account.
The Security Engineer should have logged in as the AWS account root user, which is allowed to assume any role directly.
The maintainer role does not include the IAM user as a trusted entity.
The security role does not include a statement in its policy to allow an sts:AssumeRole action.
In my experience, the answer is:
The maintainer role does not include the IAM user as a trusted entity.