i imagine you would want to provision access key pair in the subaccount (not in the main account) and use that to provision resources in the subaccount.

> Also I miss the possibility to use Multi-Factor Authentication on AWS. 

multi-factor typically applies to interactive uses (ie human).

On Tue, May 8, 2018 at 8:29 AM, Heiko Cane <heiko.cane@...> wrote:

Hello,

I would like to setup bosh in a multi account setup (as described here: https://aws.amazon.com/de/answers/account-management/aws-multi-account-security-strategy/). I only have direct access to the "main" account and have switch to another account where I can setup the vpc, ec2 instances and so on. 

Using bosh or bosh bootloader I only have the possibilities to add the access key and the secret access key but I can't trigger the "switch account". Also I miss the possibility to use Multi-Factor Authentication on AWS. 

Are there any possibilities to trigger the switch account and use multi factor?

Thank you for your help!

Heiko