Does Nuon support cross-account access?

QUESTION

Does Nuon support cross-account access?

ANSWER

The runner does not use cross-account permissions. Instead, IAM roles are defined in the vendor's app configuration.

When the vendor initiates a customer install, the Nuon control plane generates a CloudFormation stack which the customer deploys into their cloud which creates a VPC, subnets and grants the IAM roles and permissions to the runner and not directly with the vendor.

Vendors can however implement cross-account access by defining a component that performs role delegation to a user in the vendor's cloud account.

DOCS

• An example app configuration with role delegation

• The runner architecture