{"id":"iam-cross-account-requires-trust-and-identity-policy","text":"Cross-account role access requires both a trust policy on the role (in the trusting account) and an identity policy granting `sts:AssumeRole` (in the trusted account).","truth_value":"IN","source":"entries/2026/03/08/iam-cross-account.md","source_url":"","source_hash":"e48a1ca4eb9cc426","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"iam-cross-account-requires-trust-and-identity-policy","truth_value":"IN","reason":"premise"}]}}