You can use an assume role for existing Identity and Access Management (IAM) users to access AWS resources that they don't already have access to or to access resources in another AWS account. To configure an assume IAM role and enable the same account or cross-account API access, you need to establish a trust relationship between the two accounts.