# Role Deployment

Dotted automates cross-account role deployment using [AWS CloudFormation](https://aws.amazon.com/cloudformation/) (CFN) and, more specifically, "[quick-create links.](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/cfn-console-create-stacks-quick-create-links.html)" These links enable Dotted to pass a CFN template along with user-specific parameters, such as the cross-account role, external ID, Dotted ID, and more.

\
Dotted automates cross-account role deployment using AWS CloudFormation (CFN) and, more specifically, "quick-create links." These links enable Dotted to pass a CFN template along with user-specific parameters, such as the cross-account role, external ID, Dotted ID, and more.

Users only need to click the quick-create link and then click "deploy" to have the role deployed to their AWS account. The CFN templates are stored publicly, allowing users to review them before agreeing to the deployment:

* [Read-only role](https://pump-public-readonly.s3.us-west-2.amazonaws.com/pump-readonly.json)
* [Auto-pilot role](https://pump-public-readonly.s3.us-west-2.amazonaws.com/pump-auto-pilot.json)

(you can read more about these roles in the previous article, [here](https://help.pump.co/security-and-access/cross-account-role))

During deployment, after role creation, a list of properties is sent to Dotted's management account:

* Dotted ID
* Cross-account role ARN
* Dotted external ID
* User's account ID
* Role type (read-only or auto-pilot)

These properties are stored in Dotted's database. If the deployment occurs during the last step, Dotted will also invite the user's AWS account to join Dotted's AWS Organization. If the user already belongs to an organization, this step will fail. We support existing organizations joining Dotted on a case-by-case basis. Please contact our support team if this applies to you!

Lastly, we offer manual role deployment for customers who cannot work with CloudFormation.

Please contact our support team for more information. <support@usedotted.com>.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.usedotted.com/ajuda-e-suporte/acessos-e-seguranca/role-deployment.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
