AWS metadata inventory process

How do I allow users or roles in a separate AWS account access to my AWS account?

Here are the steps:

1. Login to an AWS account using a user that has Admin Privileges

2. Navigate to the IAM console

3. Select Roles Under the Access Management and click the create roles
   

    

4. Choose the “AWS account” option and enter the “Another Aws account” option
   

5. Enter Block 64’s Account ID - 440496705373 and click on Next

6. Make sure the Require external ID and Require MFA options are not selected 

7. Under the Permissions policies search for “AmazonEC2ReadOnlyAccess” and Select that option

8. Add the Role name and click on the 'Create Role' option

9. After Creating the role, select the created role and navigate to the Trust relationships tab

10. Click on Edit Trust Policy to Replace the AWS arn present with to this “arn:aws:iam::440496705373:user/aws-tenant-inventory" and click the update button
11. Save Changes
12. Copy ARN from present in the Summary Section of the Page and paste ARN as part of the AWS inventory Credentials.