Source and More information: You need more than one AWS account AWS bastions and assume-role

Author: CryptScout.com