In the centralized account, create an IAM role that has the Lambda service as a trusted entity. Add an inline policy to

assume the roles of the other AWS accounts

In the other AWS accounts, create an IAM role that has minimal permissions. Add the centralized account's Lambda

IAM role as a trusted entity.

In the centralized account, create an IAM role that has roles of the other accounts as trusted entities.

Provide minimal permissions

In the other AWS accounts, create an IAM role that has permissions to assume the role of the centralized account

Add the Lambda service as a trusted entity

In the other AWS accounts, create an IAM role that has minimal permissions Add the Lambda service as a trusted

entity