In a multi-account AWS environment, you need to implement cross-account roles to allow specific users in one account to access resources in another account securely. Describe how you would set up these roles, including the use of IAM policies and trust relationships, to ensure secure and controlled access.