Viewing Core Account resources as a Member Account Developer

Overview

To view core account resources (that is resources created in a core account and shared to member accounts) developers can switch to Read-only roles to view their created resources.

Switching Roles

1. Log in (to your member account) the AWS Console using SSO. Click the drop down menu at the top right and choose Switch Role.

2. To view VPCs and lower level DNS resources (eg hmpps-development.modernisation-platform.service.justice.gov.uk) use the member-delegation-read-only role and use the account aliases for each Core VPC account:

core-vpc-development core-vpc-test core-vpc-preproduction core-vpc-production

3. To view higher level DNS resources (eg. modernisation-platform.service.justice.gov.uk), or to view Network Firewall resources (eg. CloudWatch logs or Network Firewall policies) use the read-log-records role and use the account alias for the Core Network account:

core-network-services-production

4. To view Shared Services resources i.e AMIs created and shared, use the member-shared-services role and use the account alias for the Shared Services account:

core-shared-services-production

Last reviewed: 23 January 2026Review status: ✓ Up to dateOwner: #modernisation-platformSource: View source on GitHub

Was this page useful?