Editing the trust relationship for an existing IAM role
You can assign your existing IAM roles to your Directory Service users and groups. To do this, however, the role must have a trust relationship with Directory Service. When you use Directory Service to create a role using the procedure in Creating a new IAM role, this trust relationship is automatically set.
Note
You only need to establish this trust relationship for IAM roles that are not created by Directory Service.
To establish a trust relationship for an existing IAM role to Directory Service
Open the IAM console at https://console.aws.amazon.com/iam/
. -
In the navigation pane of the IAM console, under Access management, choose Roles.
The console displays the roles for your account.
-
Choose the name of the role that you want to modify, and once on the role's page, select the Trust relationships tab.
-
Choose Edit trust policy.
-
Under Edit trust policy, paste the following, and then choose Update policy.
You can also update this policy document using the AWS CLI. For more information, see update-trust in the AWS CLI Command Reference.
