Consider a scenario where you need to implement cross-account access to resources in a production AWS account from a development account. Describe how you would set up IAM roles and policies in the production account to allow secure and controlled access to specific resources, including the establishment of trust relationships.