Cross-account pass role is not allowed

[markus-mohemian]

I am currently running a setup where I have different AWS account under an AWS organization. Each sub-account has the IAM role OrganizationAccountAccessRole which grants permissions to the root account to perform operations.

I am wondering how do I configure serverless.yml to make this work.

Current config:

provider:
  iam:
    deploymentRole: 'arn:aws:iam:...' // ARN of the OrganizationAccountAccessRole

I always receive the error: Cross-account pass role is not allowed.

[markus-mohemian]

Figured this out: I followed serverless/serverless#5048 and he pointed out some issues with the AWS SDK for js, which somehow ignores the ~/.aws/config file. What I ended up doing is adding following section to the ~/.aws/credentials file.

[dev]
source_profile = default
role_arn = arn:aws:iam::2xxxxxxxxxxx:role/OrganizationAccountAccessRole