I have access to two AWS accounts, training and staging. Staging account holds all hosted zones, IAM roles; I want to grant access to training account so it can access a res
