No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

hey folks, is it possible to create resources in another account using an existing cross account role with pulumi? i tried looking into providers but couldn't get it to work

Create a provider with `assumeRole`

<https://www.pulumi.com/registry/packages/aws/api-docs/provider/>
```this.provider = new aws.Provider(
      name,
      {
        assumeRole: {
          roleArn: roleArnToAssume,
          sessionName: "PulumiSession",
          externalId: "PulumiApplication",
        },
        region: aws.config.requireRegion(),
        skipCredentialsValidation: true,
      },
      { parent }
    );```


For Python, I fixed it by doing this:

```test_provider = aws.Provider(
    "testprovider",
    assume_role=aws.ProviderAssumeRoleArgs(
        role_arn="arn:aws:iam::&lt;awsaccount&gt;:role/test-role",
        session_name="PulumiSession",
    ),
    # assume_role={
    #     "role_arn": "arn:aws:iam::&lt;awsaccount&gt;:role/test-role",
    #     "session_name": "PulumiSession",
    #     # "externalId": "PulumiApplication",
    # },
    region="us-east-1",
    default_tags={"tags": {"created-by": prefix}},
)```
I used aws.ProviderAssumeRoleArgs instead of just an object like in the commented out piece.