Editing the trust relationship for an existing IAM role
You can assign your existing IAM roles to your Amazon Directory Service users and groups. To do this, however, the role must have a trust relationship with Amazon Directory Service. When you use Amazon Directory Service to create a role using the procedure in Creating a new IAM role, this trust relationship is automatically set.
Note
You only need to establish this trust relationship for IAM roles that are not created by Amazon Directory Service.
To establish a trust relationship for an existing IAM role to Amazon Directory Service
Open the IAM console at https://console.amazonaws.cn/iam/
. -
In the navigation pane of the IAM console, under Access management, choose Roles.
The console displays the roles for your account.
-
Choose the name of the role that you want to modify, and once on the role's page, select the Trust relationships tab.
-
Choose Edit trust policy.
-
Under Edit trust policy, paste the following, and then choose Update policy.
{ "Version": "2012-10-17", "Statement": [ { "Sid": "", "Effect": "Allow", "Principal": { "Service": "ds.amazonaws.com" }, "Action": "sts:AssumeRole" } ] }
You can also update this policy document using the Amazon CLI. For more information, see
update-trust